A customer wants to securely deliver applications.

A customer wants to securely deliver applications. They have given these requirements to an architect:

1,100 corporate users

Applications run on Windows

Confidential data must remain inside the datacenter at all times

Datacenter has a firewall separating it off from the corporate LAN

Security team policy will NOT allow a corporate LAN subnet through the firewall to a datacenter subnet (example: source 172.16.30.0 /24, destination 10.10.1.0 /24 would NOT be allowed)

Security team policy does allow corporate LAN subnets to access specific datacenter IP addresses (example: source 172.16.30.0 /24, destination 10.10.1.100 /24 would be allowed)

50 of the 1,100 internal users work exclusively on tablets, some Android and some IOS devices

Which two recommendations can the architect propose? (Choose two.)