Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE suppo

Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco
NGE supported VPN solution?

A.
AES-GCM and SHA-2

B.
3DES and DH

C.
AES-CBC and SHA-1

D.
3DES and SHA-1