Whichcommandisneededtochangethispolicytoatunnelpolicyforapolicy-basedVPN？（）[editsecuritypoliciesfrom-zonetrustto-zoneuntrust]user@hostshowpolicytunnel-traffic{match{source-addresslocal-net；destination-addressremote-net；applicationany；then{permit；}}
A.setpolicytunnel-trafficthentunnelremote-vpn
B.setpolicytunnel-trafficthenpermittunnelremote-vpn
C.setpolicytunnel-trafficthentunnelipsec-vpnremote-vpnpermit
D.setpolicytunnel-trafficthenpermittunnelipsec-vpnremote-vpn
参考答案：D
