Which Cisco AnyConnect VPN feature enables DTLS to fall back to a TLS connection?

Which Cisco AnyConnect VPN feature enables DTLS to fall back to a TLS connection?

A.
perfect forward secrecy

B.
dead peer detection

C.
keepalives

D.
IKEv2