QUESTION 21 Which statement is true when implementing a router with a dynamic public IP address in a crypto map based site-to-site VPN? A. The router must be configured with a dynamic crypto map. B. Certificates are always used for phase 1 authentication. C. The tunnel establishment will fail if the router is configured as