Where is split tunneling defined for IKEv2 remote access clients on a Cisco router?

Where is split tunneling defined for IKEv2 remote access clients on a Cisco router?
A. IKEv2 authorization policy
B. Group Policy
C. virtual template
D. webvpn context