Security test: reply with ACK-AC-2026 only