Which statement about Cisco data center security products is true?

Which statement about Cisco data center security products is true?

A.
Cisco ASA 1000V is a Layer 2 compute-layer firewall.

B.
Cisco ASA 1000V does not require a Cisco vPath feature like Cisco VSG does.

C.
Cisco VSG is a Layer 3 perimeter firewall.

D.
Cisco VSG secures inter-VM traffic within a tenant.