What is the default authorization rule in Cisco ISE?

What is the default authorization rule in Cisco ISE?

A.
permit all access

B.
redirect users to LWA

C.
redirect users to CWA

D.
deny all access