Refer to the exhibit. What are the two steps an engineer must take to provide the highest encryption and authentication using domain credentials from LDAP?

PSK (Preshared Key) is suitable for home or small office networks but does not provide authentication using individual domain credentials from LDAP, which requires 802.1X.

Selecting WPA+WPA2 on Layer 2 Security enables the use of both WPA and WPA2 protocols, with WPA2 offering the strongest encryption available (AES-CCMP) for current wireless standards, providing compatibility while ensuring the highest level for clients that support it.

Static-WEP is an outdated and insecure encryption method with known vulnerabilities, and using it with 802.1X would compromise the "highest encryption" requirement.

WPA Policy with TKIP Encryption, while better than WEP, is not considered the highest encryption; WPA2 with AES-CCMP is stronger.

Selecting 802.1X under Authentication Key Management allows the wireless system to integrate with an external authentication server, such as a RADIUS server, which can then use LDAP to validate user domain credentials, fulfilling the requirement for authentication using domain credentials.