Using the default Cisco VPN 3002 unit authentication, what happens to the unit password?

A.
stored permanently in Cisco VPN 3002 memory

B.
authenticated via a NT Domain server

C.
pushed down to the Cisco VPN 3002 the first time the tunnel is established

D.
authenticated via a TACACS+ server