Which statements about creating VPNs in PDM are true? Choose two.

A.
PDM does not support tunnel policies that are not bound to an interface. You must select an
interface for a tunnel policy when you create it.

B.
When the inactivity timeout for all IPSec SAs have expired for a given VPN Client, the tunnel is
established.

C.
PDM hides the concept of crypto map.

D.
To create a crypto map, select crypto maps from the IPSec branch of the categories tree.

E.
After you create a tunnel policy in the VPN tab’s tunnel policy window, you must bind it to an
interface from the Access Rules tab.

F.
PDM supports tunnel policies that are not bound to an interface.