A Plan Includes These Security Settings for the Employee WLAN

A plan includes these security settings for the employee WLAN: WPA2-Enterprise with AES encryption 802.1X with PEAP-MSCHAPv2 However, the customer wants to use certificates to authenticate user devices. Which change brings the plan in alignment with the customer requirements?

A) Use EAP-TLS instead of PEAP-MSCHAPv2.
B) Use TKIP encryption instead of AES.
C) Add WPA2-PSK as an alternative to WPA2-Enterprise.
D) Add Tunneled TLS (TTLS) as an alternative to PEAP-MSCHAPv2.