You deploy mobile devices that run Microsoft Windows Mobile 5.0.  
Company security policy requires an authentication process that is stronger than a user name and password combination.  
You need to ensure that Microsoft ActiveSync sessions use an authentication process that meets the company security policy.  
What should you do？（）

You deploy mobile devices that run Microsoft Windows Mobile 5.0.  
A Microsoft Windows Server 2003 server that runs Routing and Remote Access is configured to allow virtual private network （VPN） connections that are as secure as possible.  
You need to connect the Windows Mobilebased devices to the VPN server. You also need to ensure that both ends of the VPN tunnel are authenticated. 
Which two actions should you perform？（）