Which statement is correct about tunnel interface?

A.
They can be unnumbered and used in policy-based translations if the interface is in route mode

B.
They need to be configured in the zone where the protected resources reside

C.
They can be unnumbered from any interface residing on the same virtual router as the protected resources