Which configuration would protect an SMTP server in the dmz zone from spam originating in the untrust zone?

You have configured a UTM profile called Block-Spam, which has the appropriate antispam configuration to
block undesired spam e-mails. Which configuration would protect an SMTP server in the dmz zone from spam
originating in the untrust zone?

A.
set security policies from-zone dmz to-zone untrust policy anti-spam then permit application-services utmpolicy Block-Spam

B.
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application-services utmpolicy Block-Spam

C.
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application-services antispam-policy Block-Spam

D.
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application-services BlockSpam