What is a Host Enforcer policy?

What is a Host Enforcer policy?

A.
A policy that is defined on the endpoint that permits or denies inbound or outbound traffic.

B.
A policy that is sent to the endpoint that permits or denies inbound or outbound traffic.

C.
A policy that is sent to the protected resource that permits or denies inbound or outbound traffic.

D.
A policy that is defined on the protected resource that permits or denies inbound or outbound traffic.