which two statements about implementing GDOI in a DMVPN network are true?(Choose
two)

A.
DMVPN spokes with tunnel protection allow traffic to be encrypted to the hub

B.
Rekeying requires an exclusive IGMP join in the mGRE interface.

C.
The crypto map is applied to the subinterface of each spoke .

D.
Direct spoke-to-spoke traffic is black-holed

E.
If a group member rekey operation fails. It must wait for the SA lifetime to
expire before it can register with th key server

F.
The DMVPN hub can actes the GDOI key server