You need to design a method to ensure that only scripts that are approved by the IT department can run on company computers. Your solution must meet business requirements. What should you do？（）

• A、Create a new software restriction policy in the Default Domain Policy GPO that removes the Microsoft Visual Basic Scripting Edition and the Windows Script Component file types from the File Types list
• B、Create a new software restriction policy in the Default Domain Policy GPO that disables the use of Wscript.exe and Cscript.exe
• C、Configure Windows Script Host to not execute Windows Script Component file types
• D、Configure Windows Script Host to execute only scripts that are signed by a certificate issued by an approved certification authority （CA）