Which of the following statements about the security model in Microsoft Dynamics AX 2012 is true?

Which of the following statements about the security model in Microsoft Dynamics AX 2012 is true?

A.
Duties can be applied directly to security roles.

B.
Duties are combined into privileges.

C.
Privileges are grouped into process cycles.

D.
Privileges cannot be applied directly to security roles.