An engineer is troubleshooting VPN connectivity issues between a PC and ASA using Cisco AnyConnect IPsec IKEv2.
Which requirement must be satisfied for proper functioning?
A. The SAN must be used as the CN for the ASA-side certificates.
B. Profile and binary updates must be downloaded over IPsec.
C. The connection must use EAP-AnyConnect.
D. PC certificate must contain the server-auth EKU.