Hi,
i just checked Gmail's help and they stated that "Some applications that work outside a browser aren't yet compatible with 2-step verification and cannot ask for verification codes, for example: Google Sync via Exchange."
Unfortunately, this is a limitation between Google and Exchange, and not the Surface RT tablet. We'll have to wait for Google and Microsoft to work this one out at a larger scale before we'll be able to implement it on the Surface tablet.
However, there might be hope as Google does provide this video to try a possible workaround: Watch the video on application-specific passwords
I hope this helps!
David