Which two statements about AP Local Authentication by FlexConnect AP in standalone mode are true? (Choose two.)
A . Cisco Wireless LAN Controller must generate a certificate signing request by itself for submitting to a certificate authority for signing.
B . Only the vendor Certificate Authority (CA) certificate has to be downloaded to the Cisco Wireless LAN Controller to EAP-TLS authentication.
C . When using EAP-TLS, a FlexConnect group must be created so that the Cisco Wireless LAN Controller can push the certificates to the FlexConnect AP in the FlexConnect Group.
D . From AireOS release 8.0, Cisco Extended Keying Groups (CEKG) is a supported Local Authentication Protocol when deploying FlexConnect.
E . Only LEAP, EAP-FAST, PEAP, and EAP-TLS authentications are supported.
Answer: AC