The Trust zone of the USG firewall of a certain network is connected to the terminal host, and the Untrust zone is connected to the security controller. If the security controller can issue rules to the USG, which of the following security policies must be configured?

The Trust zone of the USG firewall of a certain network is connected to the terminal host, and the Untrust zone is connected to the security controller. If the security controller can issue rules to the USG, which of the following security policies must be configured?
A . security-policy
rule name local_to_trust
source-zone local
destination-zone trust
action permit
B. security-policy
rule name untrust_to_local
source-zone untrust
destination-zone local
action permit
C. security-policy
rule name to_local
source-zone untrust trust
destination-zone local
action permit
D. security-policy
rule name untrust_to_local
source-zone untrust
destination-zone local
action permit
rule name local_to_trust
source-zone local
destination-zone trust
action permit