Which of the following statements about the ldapsearch command are true? (Select THREE correct answers.)

The `-x` option for `ldapsearch` explicitly forces the client to use simple bind authentication, which involves transmitting the provided username and password (if any) using a basic mechanism, often without strong encryption unless TLS/SSL is independently negotiated.

The `-h` option allows users to specify the hostname or IP address of the target LDAP server for the search operation, enabling connection to a specific server regardless of default configurations.

The `-b` option specifies the *base distinguished name* (Base DN) for the search operation, which defines the starting point within the directory tree, not the database where an LDIF file will be included.

The `-L` option instructs `ldapsearch` to display the search results in a standard LDIF (LDAP Data Interchange Format) format, omitting extraneous comments and version information, making the output suitable for parsing or for use with other LDAP utilities like `ldapadd` or `ldapmodify`.

The `-Z` option attempts to establish a StartTLS session for encrypted communication. If the StartTLS operation fails (e.g., due to server non-support or certificate issues), `ldapsearch` typically terminates with an error or warning, rather than continuing without a successful StartTLS operation.