Which statement about DH group is true?

Which statement about DH group is true?

A.
The DH group does not provide data authentication.

B.
The DH group is used to provide data confidentiality.

C.
The DH group is used to establish a shared key over a secured medium.

D.
The DH group is negotiated in IPsec phase-2.