Which two criteria would be used for matching in security policies? (Choose two.)

In Junos OS, security policies evaluate passing traffic and enforce security decisions based on specific match criteria defined in the policy structure. The primary match criteria supported within Junos SRX security policies include source address (IP address, prefix, or address book set), destination address, and application (predefined Junos applications, custom application definitions, or dynamic applications). Advanced match conditions can also include source user identities. In contrast, physical or logical interface names represent the attachments that define security zones, while MAC addresses operate at Layer 2. Neither interface names nor MAC addresses are valid match conditions inside security policy match statements.

A: MAC addresses operate at Layer 2 and are not valid match criteria in Junos security policies.

C: Interface names belong to security zone definitions rather than policy match parameters.

- Juniper Networks Technical Documentation: "Junos OS Security Policies User Guide", Section: Security Policy Components and Match Criteria.

- Juniper Networks Official Training: "JNCIA-SEC (JN0-232) Courseware", Module: Security Policy Overview.