policy-map type inspect ipv6 IPv6-map
match header routing-type range 0 255
drop
class-map outside-class
match any
policy-map outside-policy
class outside-class
inspect ipv6 IPv6-map
service-policy outside-policy interface outside
Refer to the exhibit.

Given the Cisco ASA configuration above, which commands need to be added in order for the
Cisco ASA appliance to deny all IPv6 packets with more than three extension headers?

A.
policy-map type inspect ipv6 IPv6-map
match ipv6 header
count > 3

B.
policy-map outside-policy
class outside-class
inspect ipv6 header count gt 3

C.
class-map outside-class
match ipv6 header count greater 3

D.
policy-map type inspect ipv6 IPv6-map
match header count gt 3
drop

Explanation: