Which two statements describe the security policy attachment features of Oracle SOA Suite 11g?

Which two statements describe the security policy attachment features of Oracle SOA Suite 11g?

A.
The order in which policies are attached to a subject determines the order in which the policies
are executed.

B.
JDeveloper groups the policy that can be attached into the five categories of interceptors.

C.
Only one security polity can be attached to a web service at a time.

D.
In JDeveloper, a security policy can be attached to a web service, but it can be marked as
either enabled or disabled.

Explanation:

Note:
* If necessary, add additional policies.
You can temporarily disable a policy by deselecting the checkbox to the left of the name of the
attached policy. This action does not detach the policy.
* You can attach or detach policies to and from service binding components, service components,
and reference binding components in a SOA composite application. Use Oracle JDeveloper to
attach policies for testing security in a design-time environment. When your application is ready for
deployment to a production environment, you can attach or detach runtime policies in Oracle
Enterprise Manager Fusion Middleware Control Console.