An engineer maintains a corporate-owned mobility infrastructure, and the organization requires that all web browsing using corporate-owned resources be monitored. Which of the following would allow the organization to mee

t its requirement? (Choose two.)

A. Exempt mobile devices from the requirement, as this will lead to privacy violations

B. Configure the devices to use an always-on IPSec VPN

C. Configure all management traffic to be tunneled into the enterprise via TLS

D

. Implement a VDI solution and deploy supporting client apps to devices

E. Restrict application permissions to establish only HTTPS connections outside of the enterprise boundary