which interface on a Cisco ASA 1000V firewall should a security profile be applied when a VM sits behind it?

To which interface on a Cisco ASA 1000V firewall should a security profile be applied when a VM sits
behind it?

A.
outside

B.
inside

C.
management

D.
DMZ