To install the certificate and key for an endpoint, which three components are required?

A network administrator wants to deploy GlobalProtect with pre-logon for Windows 10 endpoints and follow Palo Alto Networks best practices.

To install the certificate and key for an endpoint, which three components are required? (Choose three.)
A . server certificate
B . local computer store
C . private key
D . self-signed certificate
E . machine certificate

Answer: B,D,E

Explanation:

https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/globalprotect-quick-configs/remote-access-vpn-with-pre-logon.html