Which three options are Cisco ESA facilities that can use LDAP group queries? (Choose three.)

Anti-spam settings are global or policy-level engine configurations and do not directly consume LDAP group query results for per-group rule application.

Sender groups in the HAT classify connecting IP addresses by reputation or network block, not by LDAP directory group membership.

Message filters support LDAP group queries through LDAP accept, routing, and group query calls, allowing filter rules to branch based on a recipient's or sender's group membership.

The RAT controls accepted recipient domains and addresses at connection time and does not perform LDAP group queries.

Incoming mail policies can use LDAP group queries to match specific user groups to tailored anti-spam, anti-virus, and content scanning settings.

Content filters can evaluate LDAP group membership as a condition, enabling group-specific actions such as encryption, quarantine, or adding disclaimers.

Destination controls manage outbound delivery parameters per domain and do not use LDAP group queries.

SenderBase reputation filtering is a real-time IP reputation lookup that operates independently of internal LDAP directory queries.