You have a computer named Computer1 that runs Windows 10 Enterprise. Computer1 is a member of an Active
Directory domain named contoso.com.
You have a line-of-business universal app named App1. App1 is developed internally.
You need to ensure that you can run App1 on Computer1. The solution must meet the following requirements:
Minimize costs to deploy the app.
Minimize the attack surface on Computer1.
What should you do?

A.
Have App1 certified by the Windows Store.

B.
Sign App1 with a certificate issued by a third-party certificate authority.

C.
From the Update & Security setting on Computer1, enable the Sideload apps setting.

D.
Run the Add-AppxProvisionedPackage cmdlet.