Which two EAP methods may be susceptible to offline dictionary attacks?

Which two EAP methods may be susceptible to offline dictionary attacks? (Choose two.)
A. EAP-MD5
B. LEAP
C. PEAP with MS-CHAPv2
D. EAP-FAST