An Organization Recently Installed a Cisco WSA and Would Like

An organization recently installed a Cisco WSA and would like to take advantage of the AVC engine to allow the organization to create a policy to control application specific activity. After enabling the AVC engine, what must be done to implement this?

A) Use security services to configure the traffic monitor.
B) Use URL categorization to prevent the application traffic.
C) Use an access policy group to configure application control settings.
D) Use web security reporting to validate engine functionality.