A policy-based IPsec VPN is ideal for which scenario?
A.
when you want to conserve tunnel resources
B.
when the remote peer is a dialup or remote access client
C.
when you want to configure a tunnel policy with an action of deny
D.
when a dynamic routing protocol such as OSPF must be sent across the VPN
http://www.juniper.net/techpubs/en_US/junos11.4/topics/concept/policy-based-route-based-vpn-comparing.html
Policy-based VPN tunnels are required for remote-access (dial-up) VPN configurations.