What facts are true regarding controllers and APs in a Split MAC architecture? (Choose 2)

A.
An IP tunnel is established between the AP and controller for AP management and control
functions.

B.
Using centralized data forwarding, APs never tag Ethernet frames with VLAN identifiers or
802.1p CoS.

C.
With 802.1X/EAP security, the AP acts as the supplicant and the controller acts as the
authenticator.

D.
Management and data frame types must be processed locally by the AP, while control frame
types must be sent to the controller.

E.
In a distributed (local bridging) data forwarding model, the AP handles frame encryption and
decryption.