Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（）
[edit security policies from-zone trust to-zone untrust]
user@host# show
policy tunnel-traffic {
match {
source-address local-net；
destination-address remote-net；
application any；
then {
permit；
}
}

多项选择题Whichtwoconfigurationelementsarerequiredforapolicy-basedVPN？（）

A.IKE gateway
B.secure tunnel interface
C.security policy to permit the IKE traffic
D.security policy referencing the IPsec VPN tunnel

多项选择题Whichtwoconfigurationelementsarerequiredforaroute-basedVPN？（）

A.secure tunnel interface
B.security policy to permit the IKE traffic
C.a route for the tunneled transit traffic
D.tunnel policy for transit traffic referencing the IPsec VPN