What are two methods for sending bearer access tokens in resource requests to servers? (Choose two,)

What are two methods for sending bearer access tokens in resource requests to servers? (Choose two,)
A . in plaintext for user access
B . in the HTTP API schema
C . in the HTTP request entity-body
D . in the "Authorization" request header field
E . in the HTTP request URI

Answer: C,D