Regarding secure tunnel （st） interfaces， which statement is true？（）

• A、You cannot assign st interfaces to a security zone.
• B、You cannot apply static NAT on an st interface logical unit.
• C、st interfaces are optional when configuring a route-based VPN
• D、A static route can reference the st interface logical unit as the next-hop