Which three steps are required to create an IPsec VPN tunnel?

Which three steps are required to create an IPsec VPN tunnel? (Choose three.)
A. Create an IPsec service.
B. Add a local endpoint.
C. Configure an IPsec session.
D. Configure a distributed firewall policy.
E. Add a logical switch.