Which two statements are true about VIP addresses when deploying a Junos Pulse Access Control Service cluster?