You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone.
How would you accomplish this task?
A. Configure the host-inbound-traffic system-services ping except parameter in the untrust security zone.
B. Configure the application tracking parameter in the untrust security zone.
C. Configure a from-zone untrust to-zone trust security policy that blocks ICMP traffic.
D. Configure the appropriate screen and apply it to the [edit security zone security-zone untrust] hierarchy