Which two methods will provide the desired connectivity?

Your company is in the process of deploying a VPN network 10 connects its sites Traffic will predominantly access resources at the central site. However, on occasion, traffic must be transported from one spoke site to another.

Which two methods will provide the desired connectivity? (Choose two.)

A.
a hub-and-spoke IPSec VPN using a multipoint secure tunnel interface on the hub device

B.
a hub-and-spoke IPSec VPN using a multipoint secure tunnel interface on all devices

C.
a hub-and-spoke IPSec VPN using a separate secure tunnel unit for each spoke device

D.
a hub-and-spoke IPSec VPN using a separate multipoint secure tunnel on each spoke device