Which two of these are correct regarding access control lists? (Choose two.)

A.
An ACL can be applied to multiple interfaces.

B.
An ACL wildcard mask is identical to an IP subnet mask.

C.
There may be multiple ACLs per protocol, per direction, and per interface.

D.
There is an “implicit deny” at the end of an ACL and will result in a dropped packet.

E.
An ACL acts on all packets, those flowing thru the router and those originated by the router itself.

F.
An ACL will be processed from top to bottom and may have multiple matches that will act on the packet that is being tested.