An enterprise must ensure that all devices that connect to its networks have been previously
approved. The solution must support dual factor mutual authentication with strong identity assurance. In order to reduce costs and administrative overhead, the
security architect wants to outsource identity proofing and second factor digital delivery to the third party. Which of the following solutions will address the enterprise
requirements?

A.
Implementing federated network access with the third party.

B.
Using a HSM at the network perimeter to handle network device access.

C.
Using a VPN concentrator which supports dual factor via hardware tokens.

D.
Implementing 802.1x with EAP-TTLS across the infrastructure.