If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?
A . IP address
B . Once Internet Service is selected, no other object can be added
C . User or User Group
D . FQDN address

Answer: C