What is true about proper subset encryption domains?

A.
Only one domain can be fully contained within another domain.

B.
There can multiple levels of domains contained within a domain.

C.
Devices in the internal encryption domain are excluded from the domain of the outer gateway.

D.
No special steps need be taken to allow the connection through the outer gateway.

Explanation:

: This is a feature of proper subset encryption domains, inside a domain, you can have multiple
levels contained within it. This could not happen in a fully overlapped VPN domain. You can check
this feature in the Online NG documentation. See “proper subset features”.