Which item below in a Security Policy would be enforced first?

[tagged]
Which item below in a Security Policy would be enforced first?

A.
Administrator-defined Rule Base

B.
Network Address Translation

C.
IP spoofing/IP options

D.
Security Policy “First” rule