You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border Gateway Protocol (BGP).
Which routing option should you choose?

A. Dynamic routing using Cloud Router B. Route-based routing using default traffic selectors C. Policy-based routing using a custom local traffic selector D. Policy-based routing using the default local traffic selector