Regarding an IPsec security association （SA）， which two statements are true？（）

多项选择题WhichtwoparametersareconfiguredinIPsecpolicy？（）

A.mode
B.IKE gateway
C.security proposal
D.Perfect Forward Secrecy

多项选择题WhichthreeparametersareconfiguredintheIKEpolicy？（）

A.mode
B.preshared key
C.external interface
D.security proposals
E.dead peer detection settings

多项选择题WhichtwostatementsabouttheDiffie-Hellman（DH）keyexchangeprocessarecorrect？（）

A.In the DH key exchange process， the session key is never passed across the network.
B.In the DH key exchange process， the public and private keys are mathematically related using the DH algorithm.
C.In the DH key exchange process， the session key is passed across the network to the peer for confirmation.
D.In the DH key exchange process， the public and private keys are not mathematically related， ensuring higher security

多项选择题Whichtwostatementsregardingasymmetrickeyencryptionaretrue？（）

A.The same key is used for encryption and decryption.
B.It is commonly used to create digital certificate signatures.
C.It uses two keys： one for encryption and a different key for decryption.
D.An attacker can decrypt data if the attacker captures the key used for encryption

多项选择题WhichthreesecurityconcernscanbeaddressedbyatunnelmodeIPsecVPNsecuredbyAH？（）

A.data integrity
B.data confidentiality
C.data authentication
D.outer IP header confidentiality
E.outer IP header authentication