You need to ensure that Server1 can respond to ping requests from computers that do not support IPSec

Your network contains an Active Directory domain named contoso.com. All servers run
Windows Server 2012 R2.A server named Server1 is configured to encrypt all traffic by
using IPSec.
You need to ensure that Server1 can respond to ping requests from computers that do not
support IPSec.
What should you do?

A.
From a command prompt, run netsh set global autotuninglevel =
highlyrestrictedcongestionprovider=none.

B.
From a command prompt, run netsh set global autotuninglevel-restricted
congestionprovider=ctcp.

C.
From Windows Firewall with Advanced Security, allow unicast responses for the Domain
Profile.

D.
From Windows Firewall with Advanced Security, exempt ICMP from IPSec.