When configuring Internet access from a MPLS VPN using a separate subinterface, which two configurations are required on the PE router? (Choose two.)

A.
Use the ip vrf forwarding command on the subinterface that is used for MPLS VPN access.

B.
Use the ip vrf forwarding command on the subinterface that is used for Internet access.

C.
The CE router is configured as a BGP neighbor in both the global BGP process and inside the VPN in the VRF.

D.
The PE-to-CE VPN and Internet routing are configured using two separate address-family ipv4 vrf commands, one for VPN routing and one for Internet routing.

Explanation:

The internet routing is run in a (separate) MPLS VPN and therefore requires its own "ip vrf forwarding" command on the subinterface used for connecting the internet vrf to the customer.
The answer is not E as there is no reason for connecting the ce to the global ipv4 routing table for this is not carrying the internet routing, a separate VRF is carrying it. The answer is not D as this is only required if you’re using bgp as the ce-PE routing protocol. As this hasn’t been specified, it can’t be required.