Which two statements are true regarding the system-default security policy [edit security policies default-policy]?