Where does the application router request the access token in the Cloud Foundry environment?

Where does the application router request the access token in the Cloud Foundry environment?
A . From the CredentialStore service
B. From the business application using the OAuth 2.0 client credential flow
C. From the XSUAA service using the OAuth 2.0 authorization code flow
D. From the protected resources hosted by the resource server

Answer: D