You have an Exchange organization. All servers in the organization have Exchange Server 2010 Service Pack 1 (SP1) installed. The organization contains the servers configured as shown in the following table.
Server                name                      Server role
Edge1                 Edge                        Transport
Edge2                 Edge                        Transport
Hub1                   Hub                         Transport
Hub2                  Hub                          Transport
CAS1                   Client                      Access
CAS2                  Client                       Access
MBX1                 Mailbox
MBX2                 Mailbox

You plan to deploy a line-of-business application named App1. App1 will have a built-in SMTP service that will send e-mail messages to users in the Exchange organization. You need to recommend a message routing solution that meets the following requirements:

Ensures that App1 can send e-mail messages to internal users.
Prevents other servers on the internal network from sending e-mail messages to internal users.
Ensures that each e-mail message received by the Exchange organization is scanned for viruses.
You install Microsoft Forefront Protection 2010 for Exchange Server on both Edge Transport servers.

Which of the following solutions is the best recommendation? (More than one answer choice may achieve the goal. Select the BEST answer.)

A.
On Hub1, install Forefront Protection 2010 for Exchange Server.
On Hub1, create a new internal Receive connector, and then configure the Remote Network settings to include the IP address of App1.
On the server that hosts App1, configure the SMTP service to relay e-mail directly to Hub1.

B.
From the properties of the default Receive connector on Edge1, configure the Remote Network settings to include the IP address of App1, and then add the Anonymous users permission group to the Receive connector.
On the server that hosts App1, configure the SMTP service to relay e-mail to Edge1.

C.
On Hub1, install Forefront Protection 2010 for Exchange Server.
On Hub1, add the Anonymous users permission group to the default Receive connector.
On an internal DNS server, create a Mail Exchanger (MX) record that points to Hub1.
On the server that hosts App1, configure the SMTP service to relay e-mail by using DNS name resolution.
On Edge1, create a new internal Receive connector.

D.
From the properties of the new Receive connector, configure the Remote Network settings to include the IP address of App1, and then add the Anonymous users permission group to the Receive connector.

E.
From the properties of the default internal Receive connector on Edge1, exclude the IP addresses of the internal network.
On the server that hosts App1, configure the SMTP service to relay e-mail to Edge1.