Which of the following statements is$/$are correct? Choose all that apply.

a$.$ At the process layer, entitlement can be used to define the processes or functions run within an application. Entitlement can also specify that enhanced functions require additional verification $($which can prompt the user or run in the background$).$

b$.$ At the application layer, entitlement rules can define the protocols allowed to be used.

c$.$ At the network layer, entitlement can map identity and$/$or attributes to functionality

d$.$ At the system layer, identity and attributes used as part of the entitlement rules can stop or restrict access, or may direct access to a particular interface, for example, a web interface rather than a full$-$GUI interface.$|$