Which three statements about GDOI are true? (Choose three.)
A.
GDOI uses TCP port 848.
B.
The GROUPKEY_PULL exchange is protected by an IKE phase 1 exchange.
C.
The KEK protects the GROUPKEY_PUSH message.
D.
The TEK is used to encrypt and decrypt data traffic.
E.
GDOI does not support PFS.