You are configuring an IPSec tunnel between two devices. Which two statements are true? (Choose two.)
A.
You define your transit data encryption algorithms under the [services ipsec-vpn ike] configuration hierarchy.
B.
You must configure IKE to establish the tunnel.
C.
You define your transit data encryption algorithms under the [services ipsec-vpn ipsec] configuration hierarchy.
D.
You can configure manual or dynamic security associations.