An educational institution would like to make computer labs available to remote students. The labs are used for various IT networking, security, and programming courses. The requirements are:
* Each lab must be on a separate network segment.
* Labs must have access to the Internet, but not other lab networks.
* Student devices must have network access, not simple access to hosts
on the lab networks.
* Students must have a private certificate installed before gaining
access.
* Servers must have a private certificate installed locally to provide
assurance to the students.
* All students must use the same VPN connection profile.
Which of the following components should be used to achieve the design in conjunction with directory services?