Which of the following could grant or deny access based on the originating IP address?

A. Azure Firewall
B. Azure Application Gateway
C. Azure Network Security Groups
D. Azure VPN Gateway