You are configuring an IPSec tunnel between two devices. Which two statements are true? (Choose two.)

A.
You define your transit data encryption algorithms under the [services ipsec-vpn ike] configuration hierarchy.

B.
You must configure IKE to establish the tunnel.

C.
You define your transit data encryption algorithms under the [services ipsec-vpn ipsec] configuration hierarchy.

D.
You can configure manual or dynamic security associations.