Which command is needed to change this policy to a tunn

单项选择题

Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（）
[edit security policies from-zone trust to-zone untrust]
user@host# show
policy tunnel-traffic {
match {
source-address local-net；
destination-address remote-net；
application any；
then {
permit；
}
}

A.set policy tunnel-traffic then tunnel remote-vpn
B.set policy tunnel-traffic then permit tunnel remote-vpn
C.set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D.set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn

JN0-331