What is the default action when a new custom category is created and added to an access policy?

What is the default action when a new custom category is created and added to an access policy?
A. monitor
B. allow
C. block
D. decrypt