what determination does the access list make about VPN traffic?

In an IPsec VPN, what determination does the access list make about VPN traffic?

A.
whether the traffic should be blocked

B.
whether the traffic should be permitted

C.
whether the traffic should be encrypted

D.
the peer to which traffic should be sent