Which two statements would explain why users cannot login to the vSphere Web Client?

When attempting to log in with the vSphere Web Client, users have reported the error:
Incorrect Username/Password
The administrator has configured the Platform Services Controller Identity Source as:
Type. Active Directory as an LDAP Server
Domain: vmware.com
Alias: VMWARE
Default Domain: Yes
Which two statements would explain why users cannot login to the vSphere Web Client? (Choose two.)

A.
Users are typing the password incorrectly.

B.
Users are in a forest that has 1-way trust.

C.
Users are in a forest that has 2-way trust.

D.
Users are logging into vCenter Server with incorrect permissions.

Explanation:
Explanation/Reference: