which statement is true?

Regarding a route-based versus policy-based IPsec VPN, which statement is true?

A.
A route-based VPN generally uses less resources than a policy-based VPN.

B.
A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.

C.
A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.

D.
A route-based VPN uses a policy referencing the IPsec VPN; a policy-based VPN policy does not use a policy
referencing the IPsec VPN.