You are tasked to architect a new IPsec deployment with the following criteria:

– There are two HQ sites that all satellite offices must connect to.

– The satellite offices do not need to communicate directly with other satellite offices.

– No dynamic routing will be used.

– The design should minimize the number of tunnels being configured.

Which topology should be used to satisfy all of the requirements?

A. Redundant

B. Hub-and-spoke

C. Partial mesh

D. Fully meshed