Which two statements about AP Local Authentication by FlexConnect AP in standalone mode are true? (Choose two.)

Which two statements about AP Local Authentication by FlexConnect AP in standalone mode are true? (Choose two.)
A . Cisco Wireless LAN Controller must generate a certificate signing request by itself for submitting to a certificate authority for signing.
B . Only the vendor Certificate Authority (CA) certificate has to be downloaded to the Cisco Wireless LAN Controller to EAP-TLS authentication.
C . When using EAP-TLS, a FlexConnect group must be created so that the Cisco Wireless LAN Controller can push the certificates to the FlexConnect AP in the FlexConnect Group.
D . From AireOS release 8.0, Cisco Extended Keying Groups (CEKG) is a supported Local Authentication Protocol when deploying FlexConnect.
E . Only LEAP, EAP-FAST, PEAP, and EAP-TLS authentications are supported.

View Answer

Answer: AC