According to SAFE guidelines for implementing VPN IPSec, which of these statements are true? (Select two.)

A.
Wildcard preshared keys should be used for site-to-site device authentication.

B.
Digital certificates are not tied to IP addresses but to unique, signed information on the device that is validated by the CA.

C.
Unique preshared keys are recommended between two devices and can scale in a large network.

D.
Digital certificates provide nonrepudiation but no public/private key pair aging.

E.
Digital certificates scale better but require additional administrative resources to deploy and manage.