A policy-based IPsec VPN is ideal for which scenario？（）

• A、when you want to conserve tunnel resources
• B、when the remote peer is a dialup or remote access client
• C、when you want to configure a tunnel policy with an action of deny
• D、when a dynamic routing protocol such as OSPF must be sent across the VPN