A. Grant privileges to UID and GID 1000, such that the functions running within a container acquire the default root capabilities.

B. Add applications to network security groups for fine-grained ingress/egress rules.

C. Define a policy statement that enables access to functions for requests coming from multiple IP addresses.

D. Ensure that functions in a VCN have restricted access to resources and services.