Which two statements are true regarding the system-default security policy [edit security policies default-policy]?

Which two statements are true regarding the system-default security policy [edit security policies default-policy]? (Choose two.)

A.
Traffic is permitted from the trust zone to the untrust zone.

B.
Intrazone traffic in the trust zone is permitted.

C.
All traffic through the device is denied.

D.
The policy is matched only when no other matching policies are found.