Scenario: A Citrix Architect is designing a new XenApp and XenDesktop Service environment. During discussions about the Access Layer design, the architect gathers the following requirements:

✑ Minimize management overhead where possible.

✑ Multi-factor authentication should be used for all user access to the XenApp and XenDesktop environment.

✑ Users should receive different Citrix policy settings depending on whether their connection is external to the internal network.

Which deployment option should the architect recommend for the design?