where are the two policies going to be required?

See the exhibit:

In this route-based VPN configuration, where are the two policies going to be required? (Choose two.)

A.
SSG 5 -untrust to trust

B.
SSG 5 – trust tountrust

C.
SSG 550 – trust tountrust

D.
SSG 550 -untrust to trust