You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border Gateway Protocol (BGP). Which routing option should you choose? 

Answer options:

A. Dynamic routing using Cloud Router 
B. Route-based routing using default traffic selectors 
C. Policy-based routing using a custom local traffic selector
D. Policy-based routing using the default local traffic selector

A

Reference: https://cloud.google.com/vpn/docs/concepts/overview