What is required to support policy-based NAT when using route-based VPNs?

What is required to support policy-based NAT when using route-based VPNs?

A.
Policy defined for VPN traffic.

B.
Tunnel interface must be unnumbered.

C.
Tunnel interface must have an IP address.

D.
Tunnel interface must have a custom zone assigned.