A banking customer determines that it is operating POS and POI terminals that are noncompliant with PCI DSs requirements, as it is running TLSv1.0. The customer plans to migrate the terminals to TLSv1.2. What are two requirements to complete the migration?
A. RF-Lite can be implemented toward the downstream network and VRF-based tunnels combined with IPsec can be implemented over the service provider
B. ETVPN can be implemented over the MPLS provider, which provides a payload encryption without the overhead of the tunnelling
C. firewall can be placed centrally to filter out the traffic based on required ports
D. Psec point-to-point tunnels over the MPLS and point-to-point links provide an isolated and encrypted packet end-to-end