Which two types of traffic does the Host Checker connection control policy block on the client?

Which two types of traffic does the Host Checker connection control policy block on the client?
(Choose two.)

A.
all incoming TCP traffic

B.
all outgoing TCP traffic

C.
all outgoing DNS traffic

D.
all incoming UDP traffic