When there are multiple rule rules for ACLs in VRP, which of the following statements is true regarding the order of matching? Single choice questions).

In Huawei's Versatile Routing Platform (VRP), Access Control Lists (ACLs) are processed sequentially. By default, the system uses the 'config' matching order. This means it evaluates rules based on their Rule ID, starting from the smallest number and proceeding to the largest. When a packet's parameters match a rule, the action defined in that rule (permit or deny) is executed, and the ACL lookup process for that packet stops. This default behavior allows for predictable and structured policy enforcement.

A. "Depth first" is a search algorithm for tree or graph data structures and does not describe the default linear matching process of VRP ACLs.
B. The matching order is based on the Rule ID, not the rule's action. A 'deny' rule with a lower ID will be matched before a 'permit' rule with a higher ID.
D. The matching order is not fixed. VRP allows administrators to change the matching order from the default 'config' mode to an 'auto' mode, which reorders rules for performance optimization.

1. Huawei HedEx Documentation, AR1200 V200R007C00 Configuration Guide - Security, Section: "ACL Configuration". This document details the acl match-order command, specifying config (matching by rule ID) as the default and auto as an alternative.