Which three descriptions are true about the GET VPN policy management?
(Choose three,)

A.
The key server and group member policy must match.

B.
A local policy is defined on each group member.

C.
A global policy is defined on the key server, and it is distributed to the group members.

D.
The group member appends the global policy to its local policy.