Which configuration would protect an SMTP server in the dmz zone from spam originating in the untrust zone?

You have configured a UTM profile called Block-Spam, which has the appropriate antispam configuration to block undesired spam e-mails.Which configuration would protect an SMTP server in the dmz zone from spam originating in the untrust zone?

A.
set security policies from-zone dmz to-zone untrust policy anti-spam then permit application- services utm-policy Block-Spam

B.
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services utm-policy Block-Spam

C.
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services anti-spam-policy Block-Spam

D.
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services Block-Spam