Which statement is true about IPsec enforcement using a Junos device as the enforcer?

Which statement is true about IPsec enforcement using a Junos device as the enforcer?

A.
You must manually configure the IPsec configuration on the endpoint.

B.
You must use dynamic IPsec when using a Junos device as the enforcer.

C.
Endpoints with the Odyssey Access Client are required for IPsec.

D.
An IPsec routing policy specifies which enforcer device the endpoints must use.