When a policy is applied for detection, how are exceptions evaluated?

A.
Exceptions then detection rules

B.
Detection rules then exceptions

C.
Exceptions then response rules

D.
Response rules then exceptions