Which of the following statements are true about ACL rules?

The HCIA-Datacom V2.0 Training Material explains that ACLs classify packets using configured matching rules.

Option A is incorrect because different service modules may process ACL matching results differently.

Option B is correct. ACL matching produces positive-match or negative-match results. A positive match occurs when a packet matches a configured rule, whereas a negative match occurs when no applicable rule matches.

Option C is correct because the final traffic-processing action depends on the ACL rule and the service module applying the ACL. A permit or deny match does not independently determine all service behavior.

Option D is also correct. Huawei ACL matching normally follows the first-match principle, meaning that matching stops when the first applicable rule is found.

Therefore, the correct answers are B, C, and D.

================