What should you configure?

Your network contains an FTP server that runs Windows Server 2008 R2.
You need to configure SSL security for the FTP connections.

The solution must meet the following requirements:

* All user names and passwords must be encrypted.
* The anonymous user identity must be allowed to establish a connection without requiring encryption.

What should you configure?

A.
the Control Channel setting to Allow

B.
the Control Channel setting to Require only for credentials

C.
the Data Channel setting to Allow

D.
the Data Channel setting to Require

Explanation:
Configure the FTP SSL Encryption Policy for the Control Channel and Data Channel

Configure a custom SSL encryption policy when you want to specify an SSL encryption policy for the control channel and data channel separately. For example, you might encrypt the control channel to avoid passing user credentials in cleartext. Or you might encrypt the data channel to protect sensitive information from being disclosed or changed.
To configure the SSL encryption policy for the control channel and data channel
1. Open IIS Manager.
2. In the Connections pane, select the server node.
3. In Features View, double-click FTP SSL Settings.
4. Under SSL Policy, select Custom and then click Advanced.
5. In the Advanced SSL Policy dialog box, under Control Channel select one of the following options for SSL encryption over the control channel:
* Allow: Requires SSL encryption for all users, but gives the anonymous user identity the ability to establish a connection without encryption.
* Require: Requires SSL encryption for all users, including the anonymous user identity.
* Require only for credentials: Requires SSL encryption for all users, but does not allow the anonymous user identity to establish an encrypted connection.
6. Under Data Channel, select one of the following options for SSL encryption over the data channel:
* Allow: When an encrypted connection is established, data transfer is encrypted but requests for metadata (using the DIR command) return a non-encrypted reply.
* Require: Requires SSL encryption over the data channel.
* Deny: Denies SSL encryption over the data channel.
7. Click OK.
8. In the Actions pane, click Apply.

Source: http://technet.microsoft.com/en-us/library/dd463988.aspx