Your network contains an Active Directory domain named contoso.com. You deploy Active
Directory Certificate Services (AD CS). You plan to deploy several applications by using
RemoteApp. Users will access the RemoteApp programs from domain-joined computers,
home computers, and publicly accessible computers. The corporate security policy requires
that all RemoteApp files be digitally signed. You need to recommend which certificate the
company must use to digitally sign the RemoteApp files. What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

A.
A server authentication certificate from an internal certificate authority (CA)

B.
A server authentication certificate from a trusted third-party certification authority (CA)

C.
A self-signed code signing certificate

D.
A client authentication certificate from a trusted third-party certification authority (CA)