The IPsec VPN on your SRX Series device establishes both the Phase 1 and Phase 2 security associations.
Users are able to pass traffic through the VPN. During peak VPN usage times, users complain about
decreased performance. Network connections outside of the VPN are not seriously impacted.
Which two actions will resolve the problem? (Choose two.)

A.
Lower the MTU size on the interface to reduce the likelihood of packet fragmentation.

B.
Verify that NAT-T is not disabled in the properties of the phase 1 gateway.

C.
Lower the MSS setting in the security flow stanza for IPsec VPNs.

D.
Verify that the PKI certificate used to establish the VPN is being properly verified using either the CPL or
OCSP.