which three (3) items?

An Access Policy must contain which three (3) items?

A.
Service

B.
Authentication

C.
Source address

D.
Firewall settings

E.
Action (permit, deny, tunnel)