Which of these authentication combinations would provide the highest level of security for an IPsec remote-access VPN client?