You deploy mobile devices that run Microsoft Windows Mobile 5.0 with Microsoft Messaging and Security Feature Pack. A server that runs Microsoft Exchange Server 2003 Service Pack 2 is configured by using the default installation settings.  
Company security policy requires a complex password for unlocking the Windows Mobilebased devices.  
You need to ensure that the Windows Mobilebased devices that perform Microsoft ActiveSync synchronization meet the company security policy.  
Which two actions should you perform？（）

单项选择题You deploy a mobile messaging solution by using front-end and back-end servers that run Microsoft Exchange Server 2003 Service Pack 2.   Company policy requires that all Microsoft Windows Mobilebased devices must support Microsoft Exchange ActiveSync communication that is Federal Information Processing Standard compliant.   You need to deploy the Windows Mobilebased devices.   What should you use？（）

A.Microsoft Windows Mobile 5.0
B.Microsoft Windows Mobile 2003 for Pocket PC
C.Microsoft Windows Mobile 2003 Second Edition
D.Microsoft Windows Mobile 5.0 with Microsoft Messaging and Security Feature Pack

多项选择题You deploy a mobile messaging solution with Microsoft Exchange Server 2003 Service Pack 2.   When the application is running， it must not be able to access protected registry keys.   You need to ensure that the application meets the outlined requirement. What are two possible ways to achieve this goal？（）

A.Use Microsoft Windows Mobile 5.0 Pocket PC Phone Edition operating system.
B.Use Microsoft Windows Mobile 2003 for Pocket PC operating system.
C.Use Microsoft Windows Mobile 5.0 for Smartphone operating system.
D.Use Microsoft Windows Mobile 2003 for Smartphone operating system.

单项选择题You deploy a mobile messaging solution by using front-end and back-end servers that run Microsoft Exchange Server 2003 Service Pack 2. Certificates are installed on all Microsoft Windows Mobilebased devices.   You need to allow devices that run Microsoft Windows Mobile 5.0 to perform certificate-based authentication for Microsoft Exchange ActiveSync.   What should you do？（）

A.Configure the front-end server for Kerberos Constrained Delegation （KCD）.
B.Configure a Routing Group Connector between the front-end and back-end servers.
C.Configure the Windows Mobilebased devices with a Point-to-Point Protocol （PPTP） connection.
D.Configure the Windows Mobilebased devices to use Extensible Authentication Protocol （EAP） and either a smart card or a certificate.

单项选择题You deploy mobile devices that run Microsoft Windows Mobile 5.0.   Company security policy requires an authentication process that is stronger than a user name and password combination.   You need to ensure that Microsoft ActiveSync sessions use an authentication process that meets the company security policy.   What should you do？（）

A.Deploy a two-factor authentication process.
B.Deploy a single-factor authentication process.
C.Deploy a simple PIN policy for the Windows Mobilebased devices.
D.Deploy a complex PIN policy for the Windows Mobilebased devices.

多项选择题You deploy mobile devices that run Microsoft Windows Mobile 5.0.   A Microsoft Windows Server 2003 server that runs Routing and Remote Access is configured to allow virtual private network （VPN） connections that are as secure as possible.   You need to connect the Windows Mobilebased devices to the VPN server. You also need to ensure that both ends of the VPN tunnel are authenticated.  Which two actions should you perform？（）

A.Select L2TP/IPSec on each Windows Mobilebased device.
B.Obtain and install a certificate on each Windows Mobilebased device.
C.Configure the appropriate pre-shared key on each Windows Mobilebased device.
D.Select Point-to-Point Tunneling Protocol （PPTP） on each Windows Mobilebased device.