Which three steps are required to create an IPSEC VPN tunnel?

Which three steps are required to create an IPSEC VPN tunnel? (Choose three.)
A. Create an IPSec service.
B. Configure a distributed firewall policy.
C. Configure a Tier-1 Gateway.
D. Add a local endpoint.
E. Configure an IPSec session.
F. Add a logical switch.