Which statement is correct about tunnel interfaces?

A.
They can have overlapping IP addresses.

B.
They need to be configured in the zone where the protected resources reside.

C.
They can be unnumbered and used in policy-based translations if the interface is in route
mode.

D.
They can be unnumbered from any interface residing on the same virtual router as the
protected resources.