Which item can authenticate remote IPSec VPN Users?

Which item can authenticate remote IPSec VPN Users?

A.
PFS

B.
Pre-shared Key

C.
Diffie-Hellman (DH)

D.
XUATH