A. There is no requirement to run IEEE 802.1X when MACsec is enabled on a switch port.
B. Layer 2 trunk links between switches can be secured.
C. Application flows between hosts on the LAN to remote destinations can be encrypted.
D. Layer 3 links between switches can be secured.