Which item below in a Security Policy would be enforced first?

Which item below in a Security Policy would be enforced first?

A.
Network Address Translation

B.
Security Policy First rule

C.
Administrator-defined Rule Base

D.
IP spoofing/IP options

Explanation: