Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate?

Hello, I am preparing for my exam scheduled for July, but I am having trouble understanding this question. Could you please tell me the correct answer and explain why

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid
certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose
three.)
A.Allow
B.Trust & Allow
C.Allow & Warning
D.Block
E.Block & Warning