Which Two Best Practices for the Security Design of an IPv6

Which two best practices for the security design of an IPv6 network are true? (Choose two.)

A) BGP and IS-IS only support unencrypted password authentication when IPv6 is enabled on the network
B) IPv4 ICMP policies are different from IPv6 ICMP policies on the firewall
C) uRPF is no longer required with IPv6 FHS implementation
D) IPsec must be used if there is a requirement to secure OSPFv3
E) IPv6 host security controls are enough to block and inspect IPv6 traffic from one device to another