What is enabled when you configure an EX Series switch as a firewall enforcer?

What is enabled when you configure an EX Series switch as a firewall enforcer?

A.
filters for MAC authentication realms

B.
Layer 3 enforcement by user role

C.
logs of all user sessions

D.
stateful firewalling of user traffic