You have an Exchange Server 2013 organization.
You plan to deploy Exchange ActiveSync for mobile devices. Each mobile device will be
authenticated by using certificates issued by an internal certification authority (CA).
You need to configure the organization to authenticate the mobile devices by using the certificates.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

A.
From Internet Information Services (IIS) Manager on each Client Access server, configure the
Microsoft-Server-ActiveSync virtual directory to require client certificates.

B.
From Exchange Admin Center, configure the Microsoft-Server-ActiveSync virtual directory to
require client certificates.

C.
From Internet Information Services (IIS) Manager on each Client Access server, enable Active
Directory Client Certificate Authentication.

D.
From Internet Information Services (IIS) Manager on each Mailbox server, enable Active Directory
Client Certificate Authentication.