Which of the following should be enabled in IPSec to allow this?

A security administrator wishes to protect session leys should a private key become discovered. Which of
the following should be enabled in IPSec to allow this?

A.
Perfect forward secrecy

B.
Key escrow

C.
Digital signatures

D.
CRL