Which three statements regarding Network I/O Control

Which three statements about applying access control lists to a Cisco router are true?