Which two statements are accurate about tunnel mode? (Choose two.)

A.
In tunnel mode the IPSec header precedes the original IP header.

B.
Tunnel mode is required in IPSec networks where ESP packets are used.

C.
Tunnel mode is the default mode of operation for IPSec in ScreenOS devices.

D.
Tunnel mode can only be used when operating between IPSec security gateways.