Which two statements apply to the method that ASA uses for tunnel-group lookup for LAN-to-LAN IPSec connections when using PSK-based authentication?