Which statement about the DH group is true?

A.
It provides data confidentiality.

B.
It does not provide data authentication.

C.
It is negotiated in IPsec phase 2.

D.
It establishes a shared key over a secured medium.

Explanation:
https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange