With Rule Based Security Policy, a security policy is based on:

A.
Global rules imposed for all users.

B.
Local rules imposed for some users.

C.
Global rules imposed for no body.

D.
Global rules imposed for only the local users.

Explanation:
The RFC 2828 – Internet Security Glossary talks about Rule Based Security Policy: A
security policy based on global rules imposed for all users. These rules usually rely
on comparison of the sensitivity of the resource being accessed and the possession of
corresponding attributes of users, a group of users, or entities acting on behalf of
users.