Which two statements apply to the method that ASA uses for tunnel-group lookup for LAN-to- LAN IPSec connections when using PSK-based authentication? (Choose two.)
A. If the configuration does not contain the tunnel-group with the IKE ID or peer IP address DefaultRAGroup, DefaultL2LGroup is used instead.
B. DefaultL2LGroup is used only if the PSK check in DefaultRAGroup fails.
C. DefaultRAGroup is used only if the PSK check in DefaultL2LGroup fails.
D. You can delete and create new default tunnels groups as needed.
