A Security Profile can block or allow traffic at which point?

A Security Profile can block or allow traffic at which point?
A . after it is matched to a Security policy rule that allows traffic
B. on either the data plane or the management plane
C. after it is matched to a Security policy rule that allows or blocks traffic
D. before it is matched to a Security policy rule

Answer: A

Explanation:

Security Profiles are added to the end of Security policy rules. After a packet has been allowed by the Security policy.