Which of the Following Is True Regarding the IPsec VPN

Multiple Choice

Which of the following is true regarding the IPsec VPN between the NSGs?

A) It encrypts and encapsulates the VXLAN traffic.
B) The key for IPsec needs be manually configured on NSGs and must match each other.
C) The IPsec tunnel can be directly terminated by VRS in a data center.
D) To have IPsec VPN, an encryption function needs to be enabled at each individual NSG.