In the CLI snippet that is shown, what is the function of the deny option in the access list?

Exhibit:

A.
When set in conjunction with outbound connection-type bidirectional, its function is to prevent
the specified traffic from being protected by the crypto map entry.

B.
When set in conjunction with connection-type originate-only, its function is to instruct the Cisco
ASA to deny specific inbound traffic if it is not encrypted.

C.
When set in conjunction with outbound connection-type answer-only, its function is to instruct
the Cisco ASA to deny specific outbound traffic if it is not encrypted.

D.
When set in conjunction with connection-type originate-only, its function is to cause all IP traffic
that matches the specified conditions to be protected by the crypto map.