You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border Gateway Protocol (BGP).
Which routing option should you choose?
A . Dynamic routing using Cloud Router
B . Route-based routing using default traffic selectors
C . Policy-based routing using a custom local traffic selector
D . Policy-based routing using the default local traffic selector
Answer: A
Explanation:
Reference: https://cloud.google.com/vpn/docs/concepts/overview