Which line will configure this behaviour?

The system administartor wishes to use the pam_listfile.so module to restrict which user are allowed to login via SSH.
Which line will configure this behaviour?

A.
auth required pam_listfile.so item=user sense=deny file=/etc/sshd/sshd.deny onerr=succeed

B.
auth required pam_listfile.so item=user sense=allow file=/etc/sshd/sshd.deny onerr=succeed

C.
auth required pam_listfile.so item=user sense=allow file=/etc/sshd/sshd.deny onerr=fail

D.
auth required pam_listfile.so item=user sense=deny file=/etc/sshd/sshd.deny onerr=fail