Which component must be configured to apply the SGACL?

Refer to the exhibit.

Which component must be configured to apply the SGACL?
A. secure server
B. host
C. egress router
D. ingress router