A security analyst is studying Network Security Planning and Policy. Which statement about Security policy is correct?

A. is a hardware serial number B. defines rules, responsibilities, and acceptable practices for protecting network resources C. is a malware payload D. is a DNS resource record only