What is the default authorization rule in Cisco ISE?

What is the default authorization rule in Cisco ISE?
A. permit all access
B. deny all access
C. redirect users to CWA
D. redirect users to LWA