User-ID integration is configured for a Prisma SD-WAN deployment. Branch- 1 has the user-to-IP mappings available, and User-1 is mapped to IP-1.To which two use cases can User-ID based zone-based firewall policies be applied? (Choose two.)