When is the default deny all policy an exception in zone-based firewalls?
A. when traffic traverses two interfaces in different zones
B. when traffic sources from the router via the self zone
C. when traffic traverses two interfaces in the same zone
D. when traffic terminates on the router via the self zone
