Which statement describes the behavior of a security policy?

A.
The implicit default security policy permits all traffic.

B.
Traffic destined to the device itself always requires a security policy.

C.
Traffic destined to the device’s incoming interface does not require a security policy.

D.
The factory-default configuration permits all traffic from all interfaces.