Correct Answer: BCDETo provide a service over HTTPS to arbitrary clients on the internet without further configuration, standard practices must be followed. Using a certificate issuing service to request certificates during each server deployment ensures that the certificates are trusted by clients (option C). A load balancer that decrypts incoming requests and passes them as plain HTTP to the backend servers simplifies SSL management and reduces the overhead on the backend servers (option D). Installing a wildcard certificate and the respective private key on all backend servers allows multiple subdomains to be handled securely without requiring separate certificates for each subdomain (option E). Using self-signed certificates or not using certificates at all would prevent clients from trusting the service and is therefore not suitable (options A and B).