Which application should you implement calling privileges?

Using Cisco best practices, on which application should you implement calling privileges?
A. quality of service
B. type of service
C. route pattern
D. class of restriction