What should you do on the VPN server?

You have servers that run Windows Server 2016 and devices that run Windows 10 Enterprise.
You have a certification authority (CA) that issued computer certificates to all the servers and devices.
You plan to allow the Windows 10 devices to connect to the network remotely by using VPN device tunnels.
You install the Remote Access server role on a server. From the Routing and Remote Access console, you configure the server for the VPN role.
You need to ensure that the Windows 10 devices can establish the VPN tunnel before users sign in to the devices.
What should you do on the VPN server?
A. From Authentication Methods, select Allow machine certificate authentication for IKEv2.
B. Modify the ports properties and add additional SSTP ports.
C. From Authentication Methods, select Extensible authentication protocol (EAP).
D. Modify the ports properties and add additional IKEv2 ports.