What is correct about users who are discovered via Active Directory $($AD$)$ and the Network Discovery Policy's passive discovery feature?

Both can be used for both analysis and user control in the ACP.

User information in AD cannot be used in the firewall.

Passive discovery requires a $$Threat$$ license.

Users discovered via the Network Discovery Policy$$s passive discovery feature cannot be used for user control in the ACP.