Regarding a route-based versus policy-based IPsec VPN, which statement is true?

A.
A route-based VPN generally uses less resources than a policy-based VPN.
B.
A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a
deny action.
C.
A route-based VPN is better suited for dialup or remote access compared to a policybased VPN.
D.
A route-based VPN uses a policy referencing the IPsec VPN; a policy-based VPN policy
does not use a policy referencing the IPsec VPN.