Which two statements regarding firewall user authentication client groups are true？（）

A、Individual clients are configured under client groups in the configuration hierarchy.

B、Client groups are configured under individual clients in the configuration hierarchy.

C、Client groups are referenced in security policy in the same manner in which individual clients are referenced.

D、Client groups are used to simplify configuration by enabling firewall user authentication without security policy.