What does a Citrix Engineer need to consider when upgrading the Workspace Environment Management (WEM) Administration Console?

In which two ways can a Citrix Engineer encrypt communication between the Virtual Delivery Agent (VDA) machines and Citrix Workspace app? (Choose two.)

Which file is used to store a subscription on the Storefront server?

Scenario: A Citrix Engineer is managing a large environment with multiple locations. The setup is as follows:
- The setup has a single Citrix Virtual Apps and Desktops site with
multiple zones such as a Primary zone and 3 Satellite zones.
- Virtual Delivery Agents (VDAs) are available for all applications in
all 3 Satellite zones.
- An application 'app1' has its application database located in
Satellite zone.
- As a sovereign mandate, it is desirable that this application
database should NOT be accessible from zones 2 and 3.
- The application does NOT create any database cache and cannot work if the database is NOT reachable.
- The outage is acceptable for complying with the sovereign mandate.
Which zone preference should the engineer configure to achieve this setup?

Which two statements are true for a Workspace Environment Management (WEM) configuration set? (Choose two.)