IAM’s Policy Evaluation Logic always starts with a default ____ for every request, except for those that use the
AWS account’s root security credentials by default.

A.
Permit

B.
Deny

C.
Cancel

Explanation:
http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html