Which two statements describe the purpose of a security policy?

Which two statements describe the purpose of a security policy? (Choose two.)

A.
It enables traffic counting and logging.

B.
It enforces a set of rules for transit traffic.

C.
It controls host inbound services on a zone.

D.
It controls administrator rights to access the device.