Which of the following statements is correct regarding the implementation of objectsecurity in Framework Manager?

[answerhappygod]

Which of the following statements is correct regarding the implementation of objectsecurity in Framework Manager?

A. Groups and roles can be created in the Cognos namespace when specifying access to objects.
B. Even when object security is applied, if anonymous access is configured, every object in a Framework Manager project is visible to everyone.
C. A user belongs to two groups. One of the groups is denied access to an object. The other group is granted access to the object. The result is that user has access to the object.
D. Granting access to an object for one user, group or role (except the Everyone and All Authenticated Users groups), implicitly denies access to that object for all other users, groups or roles.