Which two statements apply to the method that ASA uses for tunnel-group lookup for
LAN-to-LAN IPSec connections when using PSK-based authentication? (Choose two.)

A.
If the configuration does not contain the tunnel-group with the IKE ID or peer IP
address DefaultRAGroup, DefaultL2LGroup is used instead.

B.
DefaultL2LGroup is used only if the PSK check in DefaultRAGroup fails.

C.
DefaultRAGroup is used only if the PSK check in DefaultL2LGroup fails.

D.
You can delete and create new default tunnels groups as needed.