Tilde is working on a contract with the external penetration testing consultants. She does not want any executives to receive spear$-$phishing emails. Which rule of engagement would cover this limitation$?$

a$.$ Targets

b$.$ Scope

c$.$ Exploitation

d$.$ Limitations and exclusion