Which three should the architect recommend to meet the requirements?

During a planning meeting for an upcoming deployment of a Horizon View 7.1 environments, these requirements were identified by an architect:
Separate pools for internal and external connectivity.
Applications are not to be installed in the desktop VMs.
Application assignments are to be user-based. No VPN is to be used.
Which three should the architect recommend to meet the requirements? (Choose three.)
A. Use VMware Horizon View’s tagging feature to identify external / internal pools.
B. Use VMware App Volumes.
C. Use ThinApp to stream the applications.
D. Use VMware User Environment Manager to define network subnets that will filter the lists of external / internal desktop pools based on the user’s client ip address.
E. Use VMware NSX and deploy micro-segmentation rules that will filter the lists of external / internal desktop pools based on the user’s client ip address.
F. Use Horizon Security Server.