Which statement is true when implementing a router with a dynamic public IP address in a crypto map based site-to-site VPN?

A.	The router must be configured with a dynamic crypto map.
B.	Certificates are always used for phase 1 authentication.
C.	The tunnel establishment will fail if the router is configured as a responder only.
D.	The router and the peer router must have NAT traversal enabled.