Which statement is true when express AV detects a virus in TCP session?

Which statement is true when express AV detects a virus in TCP session?

A.
TCP RST is sent and a session is restarted.

B.
TCP connection is closed gracefully and the data content is dropped.

C.
TCP traffic is allowed and an SNMP trap is sent.

D.
AV scanning is restarted.