The correct answer is C. Check Point Access Control policy supports two primary layer types: Ordered Layers and Inline Layers. Ordered Layers are evaluated sequentially as part of the policy structure. Inline Layers are attached to parent rules and are evaluated only when the parent rule matches. Option A is wrong because “Top/Bottom” describes position, not official layer type. Option B is wrong because “Application” and “Compliance” are not the two policy-layer types. Option D is misleading because a layer can contain firewall or application-control logic, but Firewall/Application are not the layer-type names. The technical purpose of policy layers is modularity. Administrators can separate broad network controls from application/URL controls, identity-based rules, or conditional sub-rulebases. The enforcement model remains deterministic: rule matching proceeds top-down, layer behavior applies, and cleanup behavior handles unmatched traffic. Reference topics: Policy Layers, Ordered Layers, Inline Layers, Access Control Policy structure.