When the IPSec client-to-LAN applications are changed from pre-shared keys to digital
certificates, what is true about the IPSec SA?

A.
when the digital certificate is validated, the IPSec SA template automatically is updated

B.
when the digital certificate is activated, the IPSec SA template is automatically updated

C.
SA IPSec authentication method should be changed

D.
SA IKE authentication method should be changed

Explanation: