Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)

Scenario: A Citrix Administrator needs to integrate LDAP for Citrix ADC system administration using current active directory (AD) groups. The administrator created the group on the Citrix ADC, exactly matching the group name in LDAP.
What can the administrator bind to specify the permission level and complete the LDAP configuration?

Scenario: A Citrix Administrator configured a global server load balancing (GSLB) setup for internal and external users using the same host name. For internal users, cvad.citrite.net should go to the Citrix StoreFront site; for external users, it should connect to the Citrix ADC Gateway VPN site.
Which feature should the administrator configure to accomplish this?

Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below.
SSL/TLS error: You have not chosen to trust "Certificate Authority" the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?

Which two policies can a Citrix Administrator configure using only the advanced policy expression? (Choose two.)