You are the administrator of Company’s network, which consists of a single Windows 2003 domain named Company.com. The network includes a stand-alone Windows 2003 Server computer named RAS 1, which runs Routing and Remote Access. All employees use computers running Windows XP Professional to dial in to the network.

Your remote access polices permit members of the Domain Users group to dial in to RAS1 between 7:00 P.M and 6:00 A.M. every day. To increase dial-up security, your company issues smart cards to all employees.

You need to configure RAS1 and your remote access polices to support the use of the smart cards for dial- up connections.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two)

A.
Create a remote access policy that requires users to authenticate by using the EAP-TLS.

B.
Create a remote access policy that requires users to authenticate by using the MS-CHAP v2.

C.
Create a remote access policy that requires users to authenticate by using SPAP protocol.

D.
Add RAS1 to the Windows 2000 domain.

E.
Install the Internet Authentication Service (lAS) on RAS 1

F.
Install Certificate Services on RAS1 and configure it to issue encryption certificates upon request.