In an NPS environment, the credentials the NAS passes need to be authenticated. Which of the following is recommended for stronger security?

A$.)$ Microsoft Challenge Handshake Authentication Protocol version $2($MS$-$CHAP v$2)$

B$.)$ Challenge Handshake Authentication Protocol $($CHAP$)$

C$.)$ Password$-$based authentication

D$.)$ Certificate$-$based authentication