Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
A . use of decryption policies
B . measure the adoption of URL filters. App-I
C . User-ID
D . use of device management access and settings
E . expose the visibility and presence of command-and-control sessions
F . identify sanctioned and unsanctioned SaaS applications

Answer: B,E