You are a desktop support technician for your company. A software restriction policy has been created for all users. The policy has been set to Unrestricted. The security team has digitally signed all authorized corporate scripts. the security team is concerned that users may excuse .vbs scripts from untrusted sources. You need to recommend a solutiont hat prevents the execution of scripts from untrusted sources. Your solution must not interfere with the corporate logon scripts.
Which two configurations should you recommend? (Each correct answer presents part of the solution. Choose two.)

A.
Create a path rule for *.vbs. Set the rule to Disallowed.

B.
Create a certificate rule for the corporate certificate. Set the rule to Unrestricted.

C.
Create a network zone rule for the Local internet zone. Set the rule to Unrestricted.

D.
Create a network zone rule for the Trusted Sites zone. Set the rule to Basic User.

E.
Create a path rule for \\%userdomain%\sysvol. Set the rule to Disallowed.