A 'deny any-any' rule in a firewall ruleset is normally placed: a. Nowhere in the ruleset if it has a default allow policyb. Below the last allow rule, but above the first deny rule in the rulesetc. At the top of the rulesetd. At the bottom of the ruleset