Review the IPsec phase 2 configuration shown in the exhibit; then answer the question below. Which statements are correct regarding this configuration? (Choose two.).

If 'Auto-negotiate' or 'Enable Keep Alive' is configured in Phase 2, the FortiGate will actively maintain the tunnel by performing re-keys based on the configured lifetime (e.g., time or bytes), irrespective of actual data traffic.

When Perfect Forward Secrecy (PFS) is enabled in Phase 2, each re-key operation mandates a new Diffie-Hellman key exchange, ensuring that a compromise of one session key does not compromise past or future keys.

Anti-replay protection, which involves checking the sequence numbers of ESP packets, is a standard and typically enabled security feature in IPsec Phase 2 to prevent replay attacks, unless explicitly disabled.

Quick mode selectors (local/remote subnets, ports, protocols) are explicitly defined in the Phase 2 configuration or derived from firewall policy matching, rather than simply 'defaulting' to those in the firewall policy.