Which three advanced permit actions within security policies are valid?

Which three advanced permit actions within security policies are valid? (Choose three.)

A.
Mark permitted traffic for firewall user authentication.

B.
Mark permitted traffic for SCREEN options.

C.
Associate permitted traffic with an IPsec tunnel.

D.
Associate permitted traffic with a NAT rule.

E.
Mark permitted traffic for IDP processing.