Which two statements are true for a security policy? （）(Choose two.)

• A、It controls inter-zone traffic.
• B、It controls intra-zone traffic.
• C、It is named with a system-defined name.
• D、It controls traffic destined to the device's ingress interface.