Which two are recommendations to make the UC?

Universal Containers (UC) has a custom, internal-only, mobile billing application for users who are commonly out of the office. The app is configured as a connected App in Salesforce. Due to the nature of this app, UC would like to take the appropriate measures to properly secure access to the app .

Which two are recommendations to make the UC? Choose 2 answers
A . Disallow the use of Single Sign-on for any users of the mobile app.
B . Require High Assurance sessions in order to use the Connected App.
C . Set Login IP Ranges to the internal network for all of the app users Profiles.
D . Use Google Authenticator as an additional part of the login process

Answer: B,D