Which of the following conditions are required for establishing an IP Sec VPN between two FortiGate devices? (Choose two)

Which of the following conditions are required for establishing an IP Sec VPN between two FortiGate devices? (Choose two)
A . If XAuth is enabled as a server in one peer, it must be enabled as a client in the other peer
B . If the VPN is configured as route-based, there must be at least one firewall policy with the action set to IP Sec
C . If the VPN is configured as Dial Up User in one peer, it must be configured as either Static IP Address or Dynamic DNS in the other peer.
D . If the VPN is configured as a policy-based in one peer, it must also be configured as policy based in the other peer.

Answer: AC