Q57.A managed service provider wants to deploy their services in a public cloud, such as Microsoft Azure.

Q57.A managed service provider wants to deploy their services in a public cloud, such as Microsoft Azure.
A . Deploy zone-based firewall services and apply them to each tunnel
B . Terminate each VPN tunnel on a separate CSR for optimal security
C . Enable multitenant VPN services on the CSR for path isolation
D . Separate each tunnel in its own VRF
E . Apply access lists on the tunnels.

Answer: D