Which two ways to support secure transport of multicast traffic are true?

Which two ways to support secure transport of multicast traffic are true? (Choose two.)

A.
Use spoke-to-spoke design.

B.
Use IPsec over GRE tunnel.

C.
Use GET VPN.

D.
Use NBMA instead of broadcast.

E.
Disable encryption for multicast traffic.