Which statement is valid regarding SGACL?

A.
SGACL mapping and policies can only be manually configured.

B.
Dynamically downloaded SGACL does not override manually configured conflicting
policies.

C.
SGACL is access-list bound with a range of SGTs and DGTs.

D.
SGACL is not a role-based access list.

Explanation:
A role-based access control list bound to a range of SGTs and DGTs forms an SGACL

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trus
tsec/sgacl_config.html