which option should the administrator enable?

When configuring Secure Boot in Vmware ESXi, which option should the administrator enable?

A.
Embedded UEFI Shell Options

B.
ROM Based Setup Utility

C.
UEFI Optimized Boot

D.
Legacy Boot Mode