Which two security features are applied in a security policy? (Choose two.)