What is one way to implement security consistently across hub-and-spoke routers?

What is one way to implement security consistently across hub-and-spoke routers?

A.
FVRF

B.
VRF

C.
ACL
D. RIPv4