When designing a firewall policy, which of the following should be the default action?

When designing a firewall policy, which of the following should be the default action?

A.
Least privilege

B.
Implicit allow

C.
DMZ

D.
Implicit deny