When troubleshooting a VPN site-to-site to a peer, it may be necessary to “down” the tunnel. What is the best method to remove ONLY the tunnel to this peer?

When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?
A. Change the vpn tunnel sharing parameters to force the tunnel down.
B. Reboot your gateway.
C. Remove the peer from the community and install policy.
D. Delete the IKE and IPsec Security Associations using the command vpn tu.

Download Printable PDF. VALID exam to help you PASS.