You are a security administrator for your company. The network consists of a perimeter network that is configured as shown in the exhibit. (Refer to the Exhibit.)
All computers in the perimeter network run Windows Server 2003. The company’s written security policy states the following: All computers must pass a security inspection before they are placed in the perimeter network. Only computers that pass inspection are permitted to communicate with firewalls or other computers that pass inspection. All communication in the perimeter network is inspected by a networ based intrusion-detection system (IDS). Communication between computers in the perimeter network must use the strongest possible authentication methods.You decide to deploy IPSec in the perimeter network to enforce the written security policy. You enable IPSec on the firewall computers.
You need to plan IPSec configuration for the Windows Server 2003 computers so that it meets the written security policy. Which three actions should you perform to configure IPSec? (Each correct answer presents part of the solution. Choose three.)
A.
Configure tunnel mode.
B.
Configure transport mode.
C.
Enable Authentication Header (AH).
D.
Enable Encapsulating Security Payload (ESP).
E.
Use Kerberos authentication.
F.
Use certificate-based authentication.
G.
Use shared secret authentication.