You are asked to establish a hub-and-spoke IPsec VPN using your SRX Series device as
the hub. All of your spoke devices are third-party devices. Which statement is correct?

A.
You must statically configure the next-hop tunnel binding table entries for each of the
third-party spoke devices.

B.
You must ensure that you are using aggressive mode when incorporating third-party
devices as your spokes.

C.
You must create a policy-based VPN on the hub device when peering with third-party
devices.

D.
You must always peer using loopback addresses when using non-Junos devices as your
spokes.