Which two parameters help to map a VPN session to a tunnel group without using the tunnelgroup list?

Which two parameters help to map a VPN session to a tunnel group without using the tunnelgroup list? (Choose two.)

A.
group-alias

B.
certificate map

C.
use gateway command

D.
group-url

E.
AnyConnect client version