Which Sourcefire event action should you choose if you want to block only malicious traffic from a p

Which Sourcefire event action should you choose if you want to block only malicious traffic from a particular end user?

A.
Allow with inspection

B.
Allow without inspection

C.
Block

D.
Trust

E.
Monitor