How can you achieve this?

You are the security administrator for a large network. You want to prevent attackers from running
any sort of traceroute into your DMZ and discovering the internal structure of publicly accessible
areas of the network. How can you achieve this?

A.
There is no way to completely block tracerouting into this area

B.
Block UDP at the firewall

C.
Block TCP at the firewall

D.
Block ICMP at the firewall