Which of the following statements is not true about firewall policies?

Question $13$ options:

The practice of implicit allow decreases the risk of attack and reduces the volume of traffic carried on an organization's networks.

A policy lays out the rules on what traffic is allowed and what is not.

A policy defines the Internet Protocol $($IP$)$ addresses, address ranges, protocol types, applications, and other content that will be evaluated and granted or denied access to the network.

A policy should give detailed information on traffic and be used as a template or guideline for specifically configuring a firewall.