Which is NOT true about source matching with firewall policies?

A.
A source address object must be selected in the firewall policy.
B.
A source user/group may be selected in the firewall policy.
C.
A source device may be defined in the firewall policy.
D.
A source interface must be selected in the firewall policy.
E.
A source user/group and device must be specified in the firewall policy.