Which two actions can be configured to allow traffic to traverse an interface when zone-based security is being employed?

Which two actions can be configured to allow traffic to traverse an interface when zone-based security is being employed? (Choose two.)

A.
Flow

B.
Inspect

C.
Pass

D.
Allow