Which Host Checker implementation allows you to satisfy this requirement?

You are implementing several Host Checker policies on your users, however, you must block access
to a specific Web server when users fail one specific Host Checker policy. Which Host Checker
implementation allows you to satisfy this requirement?

A.
Implement your Host Checker policy as an initial policy (pre sign-in).

B.
Implement your Host Checker policy at the authentication realm to evaluate only.

C.
Implement Host Checker policies at the user role where the users with different Web access
requirements belong to different roles with different Host Checker policies defined.

D.
Implement a Web access resource policy that contains a detailed rule with conditions on specific
Host Checker policies as conditions for access.