Your company has a single Active Directory domain. All servers run Windows Server 2008. You install an iSCSI storage area network （SAN） for a group of file servers.  Corporate security policy requires that all data communication to and from the iSCSI SAN must be as secure as possible.  You need to implement the highest security available for communications to and from the iSCSI SAN. What should you do？（）

• A、Create a Group Policy object （GPO） to enable the System objects： Strengthen default permission ofinternal systems objects setting.
• B、Create a Group Policy object （GPO） to enable the System cryptography： Use FIPS compliant algorithms for encryption， hashing， and signing setting.
• C、Implement IPsec security in the iSCSI Initiator Properties. Set up inbound and outbound rules by using Windows Firewall.
• D、Implement mutual Microsoft Challenge Handshake Authentication Protocol （MS-CHAPv2） authentication in the iSCSI Initiator Properties. Set up inbound and outbound rules by using Windows Firewall.