By default, to perform IPS deny actions, where is the ACL applied when using IOS-IPS?

A.
To the ingress interface on which IOS-IPS is configured.

B.
To the ingress interface of the offending packet.

C.
To the egress interface on which IOS-IPS is configured.

D.
To the egress interface of the offending packet

E.
To the ingress interface of the offending packet and the ingress interface on which IOS-IPS is configured.