单项选择题
A.You cannot assign st interfaces to a security zone.
B.You cannot apply static NAT on an st interface logical unit.
C.st interfaces are optional when configuring a route-based VPN
D.A static route can reference the st interface logical unit as the next-hop
单项选择题 Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }
多项选择题 Whichtwoconfigurationelementsarerequiredforapolicy-basedVPN？（）
多项选择题 Whichtwoconfigurationelementsarerequiredforaroute-basedVPN？（）