Which two security components are inherent in a Contrail vRouter? (Choose two.)
A. basic tenant separation directional control for Layer 3 and Layer 4 traffic
B. Layer 7 traffic filters
C. security groups
D. encapsulation around each VM residing on the compute node
A and C