Question 67:
You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border Gateway Protocol (BGP). Which routing option should you choose?
Answer options:
A. Dynamic routing using Cloud Router B. Route-based routing using default traffic selectors C. Policy-based routing using a custom local traffic selector D. Policy-based routing using the default local traffic selector