Which two statements about IP access lists are true? (Choose two)
A. They support wildcard masks to limit the address bits to which entries are applied
B. Extended access lists must include port numbers
C. IP access lists without at least one deny statement permit all traffic by default
D. They end with an implicit permit
E. Entries are applied to traffic in the order in which they appear