Which statement describes how to deploy an access policy?

Which statement describes how to deploy an access policy?
A. The access policy must be created on the Cisco APIC and pushed to the spine.
B. The access policy must be created on the spine and then pushed to a leaf.
C. The access policy must be created on leaf and then pushed to the spine.
D. The access policy must be created on the Cisco APIC and then pushed to a leaf.