Which statement regarding GET VPN is true?

Which statement regarding GET VPN is true?

A.
TEK rekeys can be load-balanced between two key servers operating in COOP.

B.
When you implement GET VPN with VRFs, all VRFs must be defined in the GDOI group
configuration on the key server.

C.
Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

D.
The configuration that defines which traffic to encrypt is present only on the key server.

E.
The pseudotime that is used for replay checking is synchronized via NTP.