Which type of certificate should you install on each DirectAccess server?

HOTSPOT
You have a Remote Access infrastructure.
You plan to implement DirectAccess.
Which type of certificate should you install on each DirectAccess server? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Explanation/Reference:
Explanation:
References:
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/directaccess/single-server-advanced/da-adv-plan-s1-infrastructure#16-planmanagement-
servers
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/manage-remote-clients/install/step-2-configure-the-remote-access-server