Which two make up the context of an IPS attack signature?

Which two make up the context of an IPS attack signature? (Choose two.)

A.
service binding

B.
application

C.
scope

D.
application subset