Which two ways to support secure transport of multicast traffic are true? (Choose two.)

A.
Use spoke-to-spoke design

B.
Use IPsec over GRE tunnel

C.
Use GET VPN

D.
Use NBMA instead of broadcast

E.
Disable encryption for multicast traffic.

Explanation:
GET VPN = Group Encrypted Transport VPN. It is tunnel-less and can support multicast traffic.