In a GETVPN solution, which two ways can the key server distribute the new keys to the group
members during the rekey process? (Choose two.)

A.
multicast UDP transmission

B.
multicast TCP transmission

C.
unicast UDP transmission

D.
unicast TCP transmission

Explanation:
Rekeying Methods
GET VPNs use rekey messages to refresh their IPsec SAs (session keys) outside of IKE sessions.
When the group IPsec SAs are about to expire, one single rekey message for a particular group is
generated on the key server. Distribution of the rekey message does not require that new IKE
sessions be created. GET supports rekeying for Unicast and multicast.