Q3 Single choice Mark for later Regarding CAPWAP encryption, which of the following statements is wrong? A The CAPWAP data tunnel can use DTLS encryption. B DTLS supports two authentication methods: certificate authentication (the AC and AP already contain certificates) and PSK password authentication. C DTLS encryption ensures that the control messages issued by the AC cannot be eavesdropped on. D When using the certificate method for DTLS negotiation, the certificate is only used to generate the key, not to authenticate the AP. Correct answer