which traffic is permitted by the default dynamic ACL?

In a Cisco ISE deployment, which traffic is permitted by the default dynamic ACL?

A.
all IP traffic

B.
management traffic only

C.
TCP traffic only

D.
UDP traffic only