Which two statements correctly describe a DSR configuration? (Choose two

Which two statements correctly describe a DSR configuration? (Choose two.)

A.
Layer 4 load balancing is not possible.

B.
Stateful security tracking is not possible; TCP flows must be timed out to be removed from memory.

C.
Layer 7 load balancing is not possible.

D.
PBR can be used to redirect return traffic to the Cisco ACE appliance