Which statement about ACL operations is true?

A.
The access list is evaluated in its entirety.

B.
The access list is evaluated one access-control entry at a time.

C.
The access list is evaluated by the most specific entry.

D.
The default explicit deny at the end of an access list causes all packets to be dropped.