A, B, and D. CGI variables are usually sent when a URL is requested, but they are not part of the URL itself.
A2:
B and C. All ColdFusion requests are submitted via a Web Server and thus via http or https.
A3:
A, C, and D. ColdFusion runs on the server, not on the client, and therefore it can access only server resources, not client-side files. As for Microsoft Word, files are accessible by ColdFusion if they reside on the server, not the client.
A4:
A and C. XML has nothing to do with CFML, and JavaScript is a client technology.