Which two statements about RADIUS are true?(choose two)

A.
the RADIUS server must use TCP for its connection to the NAS

B.
the RADIUS server must use UDP for its connection to the NAS

C.
the NAS connection to the RADIUS server encrypts the entire packet but the header is unencrypted

D.
the NAS connection to the RADIUS server encrypts the password in an Access-Request packet only

E.
the NAS connection to the RADIUS server encrypts the password in the Accounting-Request packet only