Which statement about SMTP authentication in a Cisco ESA deployment is true?

Which statement about SMTP authentication in a Cisco ESA deployment is true?
A. It enables users at remote sites to retrieve their email messages via a secure client
B. When SMTP authentication with forwarding is performed by a second SMTP server, the second server also performs the transfer of queued messages
C. It enables users at remote sites to release email messages from spam quarantine
D. If an authenticating user belongs to more than LDAP group, each with different user roles AsyncOS grants permissions in accordance with the least restrictive user role
E. Clients can be authenticated with an LDAP bing or by fetching a passphrase as an attribute