What is the correct statement about the binding of local users to VPN instances?

local user can be bound to a VPN instance by using the local-user user-name vpn-instance vpn-instance-name command.

By default, the binding between a local user and a VPN instance is implemented.

. After a local user is bound to a VPN instance, the local user can manage the entire firewall.

Local users cannot be bound to VPN instances.