Which configuration solves this problem?

You have packet loss on an IPsec VPN using the default maximum transmission unit (MTU) where
the packets have the DF-bit (do not fragment) set.
Which configuration solves this problem?

A.
Set an increased MTU value on the physical interface.

B.
Set a reduced MSS value for VPN traffic under the [edit security flow tcp-mss] hierarchy.

C.
Set a reduced MTU value for VPN traffic under the [edit security flow] hierarchy.

D.
Set an increased MSS value on the st0 interface.