Which two configuration commands are required?

You want to implement a VPN on your SRX device that will use certificates to authenticate with the peer gateway. You plan to allow certificates from any certificate authority.

Which two configuration commands are required? (Choose two.)

A.
Set security ipsec proposal rsa-prop1 authentication-method rsa-signatures.

B.
Set security ike policy ike-poll certificate local-certificate my-cert.

C.
Set security ike proposal rsa-prop1 authentication-method rsa-signatures.

D.
Set security ike policy ike-poll certificate trusted-ca use-all.