Which statement is true about next-hop-style and interface-style service sets for IPSec VPNs?

Which statement is true about next-hop-style and interface-style service sets for IPSec VPNs?

A.
Only interface-style supports IPSec-over-GRE with the same tunnel endpoints.

B.
Both sets support routing protocols directly over IPSec.

C.
Only interface-style supports multicast traffic directly over IPSec.

D.
For data encryption you must use interface-style sets.