A, B, C, and D. Access to <cffile>, <cfcontent>, <cfdirectory>, and <cfregistry> can all be restricted through ColdFusion Administrator. You cannot restrict E and F, nor would you want to.
A2:
C. <cffile> reads and writes files but cannot return file informationfor that, you need <cfdirectory>.
A3:
B. This option is not the default and is required for file uploads.