Which IDS guideline should be followed, according to SAFE SMR?

Which IDS guideline should be followed, according to SAFE SMR?

A.
use TCP resets more often than shunning, because TCP traffic is more difficult to spoof

B.
use UDP resets no longer than 15 minutes

C.
use UDP resets more often than shunning, because UDP traffic is more difficult to spoof

D.
use TCP resets no longer than 15 minutes