Which two are valid for use with the from clause?

You are creating a destination NAT rule-set.
Which two are valid for use with the from clause? (Choose two.)

A.
security policy

B.
interface

C.
routing-instance

D.
IP address