Which other match command is used with the match flow ip destination-address command within
the class map configurations of the Cisco ASA MPF?

A.
match tunnel-group

B.
match access-list

C.
match default-inspection-traffic

D.
match port

E.
match dscp

Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/vpngrp.html
or
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_qos.html