Which three configuration scenarios will result in an IPsec negotiation failure between two FortiGate devices?
(Choose three.) any previous key. Either enable or disable PFS on both the tunnel peers; otherwise, the LAN-to-LAN (L2L)

A.
mismatched phase 2 selectors

B.
mismatched Anti-Replay configuration

C.
mismatched Perfect Forward Secrecy

D.
failed Dead Peer Detection negotiation

E.
mismatched IKE version

Explanation:
In IPsec negotiations, Perfect Forward Secrecy (PFS) ensures that each new cryptographic key is unrelated to
IPsec tunnel is not established