Which two statements regarding firewall user authentication client groups are true?

Which two statements regarding firewall user authentication client groups are true? (Choose two.)

A.
A client group is a list of clients associated with a group.

B.
A client group is a list of groups associated with a client.

C.
Client groups are referenced in security policy in the same manner in which individual clients are referenced.

D.
Client groups are used to simplify configuration by enabling firewall user authentication without security policy.