which two times does the IPS rulebase inspect traffic on an SRX device?

At which two times does the IPS rulebase inspect traffic on an SRX device? (Choose two.)

A.
When traffic matches the active IDP policy.

B.
When traffic first matches an IDP rule with the terminal parameter.

C.
When traffic uses the application layer gateway.

D.
When traffic is established in the firewall session table.

Explanation: