Which statement about when standard access control lists are applied to an interface to control inbound or outbound traffic is true?