A Windows Azure application is activated for Windows Azure Connect A corporate policy blocks Internet traffic for local servers. 
You need to recommend the firewall rule that will allow Windows Azure Connect traffic for local servers. 
What should you recommend？（）

A. Place local endpoints in groups and then configure a connection between the groups and the application.
B. Place hosted endpoints in groups and then configure a connection between the groups and the application.
C. Install endpoint software on local computers or virtual machines.
D. Install endpoint software on hosted virtual machines.

A. Create one endpoint group that contains the development computers and one endpoint group that contains the databases. Connect Web Role 1 to both endpoint groups. Connect Web Role 2 to only the database endpoint group.
B. Create one endpoint group that contains the development computers and databases. Connect Web Role 1 and Web Role 2 to the endpoint group.
C. Create one endpoint group that contains the development computers and one endpoint group that contains the databases. Connect the endpoint groups. Connect Web Role 1 and Web Role 2 to the development computer group.
D. Create one endpoint group that contains the development computers and databases， and connectit to Web Role 1.  Create one endpoint group that contains only the databases， and connect it to Web Role 2.

A. Install the Active Directory Certificate Services （AD CS） root certificate into the Enterprise Trust certificate store on each virtual machine.
B. Configure Windows Azure Connect.
C. Configure Windows Azure AppFabric Access Control.
D. Install Active Directory Federation Services （AD FS） in the existing domain.