The exhibit shows a configuration for two IPSec tunnels. The tunnel ipsec-vpn-primary is being used as the primary tunnel, and the tunnel ipsec-vpn-backup is being used as the backup tunnel. The remote device is not a Juniper Networks device. When a link failure occurs in the path that supports the primary tunnel, traffic is black holed for many minutes before the backup tunnel is used.

What can you do to reduce the failover time?

A.
Configure BFD over the IPSec tunnel.

B.
Configure VPN monitoring on the primary tunnel.

C.
Configure DPD on the primary tunnel.

D.
Configure DPD on the backup tunnel