What is a best practice for compliance in the Remote Access Domain?

A$.$ Use global user accounts whenever possible.

B$.$ Ensure the virtual private network $($VPN$)$ connection bypasses any firewalls between your VPN endpoint and your internal network.

C$.$ Include administrative users in a global user list to keep things simple.

D$.$ Disable anti$-$malware software on remote computers.