Which statement about a whitelist security model is true?

Which statement about a whitelist security model is true?

A.
Permit all traffic.

B.
Deny specific traffic flows, and permit any other traffic.

C.
Permit specific traffic flows, and deny any other traffic.

D.
Deny all traffic.