Networking policies for a vSphere Standard Switch, such as traffic shaping and security, can be overridden on which vSphere elements?

Networking policies for a vSphere Standard Switch, such as traffic shaping and security, can be overridden on which vSphere elements?

A.
On the virtual machine

B.
On the physical switch

C.
On the physical network interface

D.
On the port group