What should you recommend to provide stronger security for the Windows Mobile devices used by Research department users?

You are the messaging engineer for your company. Your company has five departments, including the Research department. Your company has an Exchange Server 2007 messaging system. Mailboxes for Research department users contain sensitive data. You plan to deploy Windows Mobile devices to allow users to access their mailboxes. You need to recommend a solution that will provide stronger security for the Windows Mobile devices used by Research department users.

Your solution should not affect users from other departments. What should you recommend?

A.
In Active Directory, enable the account option Account is sensitive and cannot be delegated for all Research
department user accounts.

B.
On the Client Access server used by Research department users, configure the Outlook Web Access
segmentation feature and disable Exchange ActiveSync Integration.

C.
Configure an ActiveSync policy that requires device encryption and longer passwords. Apply this policy to
all Research department user mailboxes.

D.
On all Client Access servers, configure ActiveSync authentication to require client certificates.

Explanation:
EMC > Organization Configuration > Client Access > New ActiveSync Mailbox Policy

EMC > Recipient Configuration > Mailbox > Properties > Mailbox Features > Exchange ActiveSync > Properties > Apply an ActiveSync Mailbox Policy…

You shouldnt affect users from other departments eliminates choices B and D.

http://technet.microsoft.com/en-us/library/bb123484.aspx