Which two VMs should be executed from encryption?

In a single cluster VM encryption scenario, which two VMs should be executed from encryption? (Choose two.)
A. Platform Services Controller
B. vSphere Replication Appliance
C. vRealize Operations Manager
D. VMware vCenter Server
E. vRealize Log Insight