which security policy is set to reject on a vSphere Standard Switch?

A security team is validating policy settings in a vSphere environment. By default, which
security policy is set to reject on a vSphere Standard Switch?

A.
Use explicit failover

B.
Promiscuous mode

C.
MAC address changes

D.
Forged transmit