Your network contains two Active Directory forests named contoso.com and fabrikam.com.You have a standalone Network Policy Server (NPS) named NPS1.You have a VPN server named VPN1. VPN1 is configured as a RADIUS client to NPS1.You need to ensure that users from both forests can establish VPN connections by using their own domain accounts.What should you do？（）
- A On NPS1, configure remediation server groups.
- B On NPS1, configure connection request policies.
- C On VPN1, modify the DNS suffix search order.
- D On VPN1, modify the IKEv2 Client connection controls.