What is NOT a valid LDAP use in Check Point Smart Directory?

What is NOT a valid LDAP use in Check Point Smart Directory?

A.
Retrieve gateway CRL’s

B.
External users management

C.
Enforce user access to internal resources

D.
Provide user authentication information for the Security Management Server