In addition to users, groups, and organizational units, which two source criteria would support this scenario?

You are creating a real-time policy for cloud applications.

In addition to users, groups, and organizational units, which two source criteria would support this scenario? (Choose two.)
A . protocol version
B . access method
C . browser version
D . device classification

Answer: BD

Explanation:

When creating a real-time policy for cloud applications, you can use access method and device classification as source criteria, in addition to users, groups, and organizational units. Access method refers to how the user accesses the cloud application, such as browser, sync client, mobile app, etc. Device classification refers to the type of device used by the user, such as managed or unmanaged, Windows or Mac, etc. These criteria can help you define granular policies based on different scenarios and risks.

Reference: [Creating Real-Time Policies for Cloud Applications]