What are the two policy types that can use a web reputation profile to perform reputation-based processing?

What are the two policy types that can use a web reputation profile to perform reputation-based
processing? (Choose two.)

A.
profile policies

B.
encryption policies