When an SRX series device receives an ESP packet, what happens?

A.
If the destination address of the outer IP header of the ESP packet matches the IP
address of the ingress interface, it will immediately decrypt the packet.

B.
If the destination IP address in the outer IP header of ESP does not match the IP address
of the ingress interface, it will discard the packet.

C.
If the destination address of the outer IP header of the ESP packet matches the IP
address of the ingress interface, based on SPI match, it will decrypt the packet.

D.
If the destination address of the outer IP header of the ESP packet matches the IP
address of the ingress interface, based on SPI match and route lookup of inner header, it will
decrypt the packet.