You Have Been Asked to Design a Remote Access VPN

Multiple Choice

You have been asked to design a remote access VPN solution to support up to 2000 devices. You must ensure that only corporate assets are allowed to connect to the VPN, and users must authenticate to gain access based on their user role. Users must use a password that they are already using to access existing applications. A user may not always use the same device to access the VPN. Which two options combined meet the requirement? (Choose two.)

A) Deploy certificates that are unique to each device
B) Deploy a SSL VPN solution
C) Deploy an IPsec VPN solution
D) Use local usernames and passwords on the VPN device
E) Deploy a central authentication directory that users can be authenticated and authorized against
F) Deploy certificates that are unique to each user