Which three statements about GDOI are true? (Choose three.)

A.
GDOI uses TCP port 848.

B.
The GROUPKEY_PULL exchange is protected by an IKE phase 1 exchange.

C.
The KEK protects the GROUPKEY_PUSH message.

D.
The TEK is used to encrypt and decrypt data traffic.

E.
GDOI does not support PFS.