When is the default Threat Prevention profile enforced?

A.
At the first Security Policy installation.

B.
Only after SensorNET participation is enabled.

C.
When the profile is assigned to a gateway.

D.
When the administrator installs the profile on Security Gateway.