Which two OAuth flows should the architect consider in their evaluation?

The CIO of universal containers(UC) wants to start taking advantage of the refresh token capability for the UC applications that utilize Oauth 2.0. UC has listed an architect to analyze all of the applications that use Oauth flows to. See where refresh Tokens can be applied.

Which two OAuth flows should the architect consider in their evaluation? Choose 2 answers
A . Web server
B. Jwt bearer token
C. User-Agent
D. Username-password

Answer: A,C