Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices.

The administrator has determined that phase 1 status is up. but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
A . On HQ-FortiGate, enable Auto-negotiate.
B . On Remote-FortiGate, set Seconds to 43200.
C . On HQ-FortiGate, enable Diffie-Hellman Group 2.
D . On HQ-FortiGate, set Encryption to AES256.

Answer: D

Explanation:

Reference: https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/168495