Which three configuration aspects must be set up outside the commerce app in order to deploy and activate B2B Commerce instance both for internal and external users?

Which three configuration aspects must be set up outside the commerce app in order to deploy and activate B2B Commerce instance both for internal and external users?
A . Profiles and permission set
B. Multi-Factor Authentication
C. Custom Attributes
D. Experience Sites
E. Salesforce CMS

Answer: A,B,C