Your enterprise network is running BGP VPNs to support multitenancy. Some of the devices with which you peer BGP do not support the VPN NLRI. You must ensure that you do not send BGP VPN routes to the remote peer.
Which two configuration steps will satisfy this requirement? (Choose two.)
To ensure BGP VPN routes are not sent to a remote peer that does not support VPN NLRI, you should configure an export policy on the local BGP peer and use the apply-vpn-export feature. The export policy on the local BGP peer will prevent VPN routes from being sent to the remote peer. The apply-vpn-export feature applies export policies specific to VPN routes, ensuring that these routes are not advertised to peers that cannot handle them.
pply both the VRF export and BGP group or neighbor export policies (VRF first, then BGP) before routes from the vrf or l2vpn routing tables are advertised to other PE routers.
https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/ref/statement/vpn-apply-export-edit-protocols-bgp-vp.html
bd is correct