policy-map type inspect ipv6 IPv6-map
match header routing-type range 0 255
drop
class-map outside-classmatch any
policy-map outside-policy
class outside-class
inspect ipv6 IPv6-map
service-policy outside-policy interface outside
Refer to the exhibit.

Given the Cisco ASA configuration above, which commands need to be added in order
for the Cisco ASA appliance to deny all IPv6 packets with more than three extension
headers?

A.
policy-map type inspect ipv6 IPv6-map
match ipv6 header
count > 3

B.
policy-map outside-policy
class outside-class
inspect ipv6 header count gt 3

C.
class-map outside-class
match ipv6 header count greater 3

D.
policy-map type inspect ipv6 IPv6-map
match header count gt 3
drop