Which two statements are true for a security policy?

Which two statements are true for a security policy? (Choose two.)

A.
It controls inter-zone traffic.

B.
It controls intra-zone traffic.

C.
It is named with a system-defined name.

D.
It controls traffic destined to the device’s ingress interface.