You want to restrict role access to only users who have the required client certificate and pass a
Host Checker policy.
Which two methods in the Admin UI would set this restriction? (Choose two.)

A.
Enable the Host Checker and certificate role restrictions.

B.
Require and enforce the Host Checker and certificate authentication policies.

C.
Use a custom expression to map users to the role based on the client certificate and Host
Checker policy.

D.
Use Secure Virtual Workspace to restrict access to the role based on the client certificate and
Host Checker policy.

Explanation:
http://www.juniper.net/techpubs/en_US/uac4.3/information-products/topiccollections/Junos-Pulse-Access-Control.pdf (page 523 onwards)