Which two options enable security group tags to the assigned to a session?

Which two options enable security group tags to the assigned to a session?
A. Firewall
B. DHCP
C. ACL
D. Source VLAN
E. ISE