What is the most secure policy for a firewall?

A.
To enable all internal interfaces

B.
To reject all traffic unless it is explicitly permitted

C.
To enable all external interfaces

D.
To accept all traffic unless it is explicitly rejected