Which three firewall user authentication objects can be referenced in a security policy?

Which three firewall user authentication objects can be referenced in a security policy? (Choose three.)

A.
access profile

B.
client group

C.
client

D.
default profile

E.
external