How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?
A . Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".
B . Run the command vpn tu on the Smart Center Server, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".
C . Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for a given peer (GW)".
D . Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for a given user (Client)".
E . Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for ALL peers and users".

Answer: C