Which three VDC resources can be constrained with a resource template?

Which three VDC resources can be constrained with a resource template? (Choose three.)

A.
ACLs

B.
NAT entries

C.
IPv4 routes

D.
IPv6 routes

E.
SPAN sessions

F.
RBAC users