Which three statements are correct for Active Directory integration with Identity Firewalls (IDFW) in an NSX-T Data Center deployment? (Choose three.)

Which three statements are correct for Active Directory integration with Identity Firewalls (IDFW) in an NSX-T Data Center deployment? (Choose three.)
A . The IDFW can be used on both physical and virtual servers as long as supported operating system is installed.
B . The Thin Agent must be enabled in VMWare tools as it is not enabled by default.
C . The IDFW can be used for Virtual Desktops (VDI) or Remote desktop sessions (RDSH support).
D . Identity-based groups can be used as the source or destination in DFW rules.
E . User identity information is provided by the NSX Guest Introspection Thin Agent.

Answer: C,D,E

Explanation:

Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-281FD887-8AB2-4D4D-841E-DF02065F3E97.html