Which Option Is True About Routing Control While Using Routing

Which option is true about routing control while using routing protocols in a DMVPN network (or any GRE-over-IPsec network) ?

A) Routing of the data plane traffic should be carried out by means of the GRE tunnel and a separate routing instance should be used to handle routing of the crypto endpoints.
B) The control plane traffic for the crypto endpoints should be routed through the GRE tunnel; the control plane traffic for the data plane traffic should travel via the transport network.
C) If the network is a private MPLS network, the routing for the data plane traffic and the crypto endpoints should be run outside of the GRE tunnel.
D) The routing used to establish the crypto endpoints should include information for the data networks behind the endpoints.