Regarding a route-based versus policy-based IPsec VPN， which statement is true？（）

• A、A route-based VPN generally uses less resources than a policy-based VPN.
• B、A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
• C、A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
• D、A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN