Which three firewall user authentication objects can be referenced in a security policy?

Which three firewall user authentication objects can be referenced in a security policy?
(Choose three.)

A.
access profile

B.
client group

C.
client

D.
default profile

E.
external