Which three options will ensure that all machines deployed by the finance business group have the same Distributed Firewall rules?