Which two Heroku features should an Architect recommend as options?

A client wants to secure their web application using SSL/TLS. They do not have specific requirements regarding using a particular version of SSL/TLS.

Which two Heroku features should an Architect recommend as options? (Choose two.)
A . Heroku Private Spaces
B . Automated Certificate Management
C . Heroku SSL
D . Heroku Shield Private Spaces

Answer: B,C