Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 st...

Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

A. On Remote-FortiGate, set Seconds to 43200. B. On HQ-FortiGate, set Encryption to AES256. C. On HQ-FortiGate, enable Diffie-Hellman Group 2. D. On HQ-FortiGate, enable Auto-negotiate.