Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)