A. The match criteria in security policies can be based on MAC address, IP address and TCP/UDP port
number.

B. Each policy entry has an associated priority that defines the order in which policy entries are evaluated.

C. The default ingress security policy allows all traffic to be forwarded.

D. Ingress security policy controls the traffic flowing into the virtual machine.