Regarding secure tunnel (st) interfaces, which statement is true?

A.
You cannot assign st interfaces to a security zone.

B.
You cannot apply static NAT on an st interface logical unit.

C.
st interfaces are optional when configuring a route-based VPN.

D.
A static route can reference the st interface logical unit as the next-hop.