Which statement about the implementation of Cisco TrustSec on Cisco Nexus 7000 Series Switches is true?

Which statement about the implementation of Cisco TrustSec on Cisco Nexus 7000 Series
Switches is true?

A.
While SGACL enforcement and SGT propagation are supported on the M and F modules,
802.1AE (MACsec) support is available only on the M module.

B.
SGT Exchange Protocol is required to propagate the SGTs across F modules that lack
hardware support for Cisco TrustSec.

C.
AAA authentication and authorization is supported using TACACS or RADIUS to a Cisco
Secure Access Control Server.

D.
Both Cisco TrustSec and 802.1X can be configured on an F or M module interface.