Which statement describes the behavior of a security policy？（）

A.The implicit default security policy permits all traffic.

B.Traffic destined to the device itself always requires a security policy.

C.Traffic destined to the device’s incoming interface does not require a security policy.

D.The factory-default configuration permits all traffic from all interfaces.