A network engineer is troubleshooting a VPN tunnel configured on an ASA and has found that Phase 1 is not completing. Which configuration parameter must match for the IKE Phase 1 tunnel to get successfully negotiated?
A. SA lifetime
B. idle timeout
C. transform-set
D. DH group
