When is a connection entry created on ASA for a packet that is received on the ingress interface? 

Answer options:

A. When the packet is checked by the access-list.
B. When the packet reaches the ingress interface internal buffer.
C. When the packet is a SYN packet or UDP packet.
D. When a translation rule exists for the packet.
E. When the packet is subjected to inspection.

D

Absolutely correct answer.