A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed interface. Which command should be used to accomplish this task? 

Answer options:

A. cts role-based policy priority-static
B. cts cache enable
C. cts authorization list
D. cts role-based enforcement

D