Which two options are possible states for the interface configured with the given OSPFv3 authentication?

To configure IPsec, you configure a security policy, which is a combination of the security policy
index (SPI) and the key (the key is used to create and validate the hash value). IPsec for OSPFv3
can be configured on an interface or on an OSPFv3 area. For higher security, you should
configure a different policy on each interface configured with IPsec. If you configure IPsec for an
OSPFv3 area, the policy is applied to all of the interfaces in that area, except for the interfaces that
have IPsec configured directly. Once IPsec is configured for OSPFv3, IPsec is invisible to you.
The secure socket API is used by applications to secure traffic. The API needs to allow the
application to open, listen, and close secure sockets. The binding between the application and the
secure socket layer also allows the secure socket layer to inform the application of changes to the
socket, such as connection open and close events. The secure socket API is able to identify the
socket; that is, it can identify the local and remote addresses, masks, ports, and protocol that carry
the traffic requiring security.
Each interface has a secure socket state, which can be one of the following:
OSPFv3 will not send or accept packets while in the DOWN state.
ReferenE. http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-auth-ipsec.html