Which two EAP methods may be susceptible to offline dictionary attacks?

Which two EAP methods may be susceptible to offline dictionary attacks? (Choose two.)

A.
EAP-MD5

B.
LEAP

C.
PEAP with MS-CHAPv2

D.
EAP-FAST