Which two methods do IPsec VTIs used to identify and transmit encrypted traffic through the tunnel?

Which two methods do IPsec VTIs used to identify and transmit encrypted traffic through the tunnel? (choose two)
A. static routing
B. dynamic routing
C. object groups
D. ACLs
E. NAT