A network administrator in the IT department sets a new AP access security policy to enforce these requirements:
All new Aruba APs that are in subnet 10.1.0/24 only can automatically join the Aruba master controller

in another subnet.
The APs are automatically set to AM mode.

All management traffic is protected in an encrypted tunnel.

In subnet 10.1.0/24, there are also many Cisco APs that use the DHCP option to register with the Cisco WLC controller.
Which steps should the network administrator take to implement the policy based on the requirements?
(Choose two.)