Which two configuration elements are required for a policy-based VPN？（）

A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN

A.A route-based VPN generally uses less resources than a policy-based VPN.
B.A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
C.A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
D.A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN

A.when you want to conserve tunnel resources
B.when the remote peer is a dialup or remote access client
C.when you want to configure a tunnel policy with an action of deny
D.when a dynamic routing protocol such as OSPF must be sent across the VPN