Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)
A . They can be configured in both NAT/Route and transparent operation modes.
B . They support L2TP-over-IPsec.
C . They require two firewall policies: one for each directions of traffic flow.
D . They support GRE-over-IPsec.
Answer: AB