What feature on the WSA provides Day Zero Revocation of access to third party sites such as Salesforce?

What feature on the WSA provides Day Zero Revocation of access to third party sites such as Salesforce?
A. Application Visibility and Control
B. SaaS Access Control
C. Dynamic Vectoring and Streaming engine
D. Day Zero Revocation engine