How does Java applet filtering distinguish between trusted and untrusted applets?

A.
relies on a list of applets that you designate as friendly

B.
relies on a list of external sites that you designate as friendly

C.
relies on a list of applets that you designate as hostile