A. It supports always-on connectivity by automatically establishing a VPN connection as needed. If multiple VPN gateways exist, load sharing occurs in a Round-robin fashion.

B. It supports session persistence after hibernation or standby.

C. Trusted Network Detection allows the connection to be established without any user intervention (authentication), if the client is located inside the office.

D. It is exclusively configured by central policies; no local configuration is possible.

E. The order of policy enforcement is as follows: dynamic access policy, user attributes, tunnel group, group policy attributes.