多选题Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)ATraffic is permitted from the trust zone to the untrust zone.BIntrazone traffic in the trust zone is permitted.CAll traff

Both USING and ON clauses can be used for equijoins and nonequijoins

Amaximum of one pair of columns can be joined between two tables using the ON clause

The ON clause can be used to join tables on columns that have different names but compatible data types

The WHERE clause can be used to apply additional conditions in SELECT statements containing the ON or the USING clause

It is executed first in the query execution

It must be the last clause in the SELECT statement

It cannot be used in a SELECT statement containing a HAVING clause

You cannot specify a column name followed by an expression in this clause

You can specify a combination of numeric positions and column names in this clause

The same key is used for encryption and decryption.

It is commonly used to create digital certificate signatures.

It uses two keys： one for encryption and a different key for decryption.

An attacker can decrypt data if the attacker captures the key used for encryption

indexes are maintained by cache entry ownes

an application should not suggest an index that another aplication had suggested

indexes cannot be sorted

each application using Coherence may suggest the same set of indexes when it starts

A client group is a list of clients associated with a group.

A client group is a list of groups associated with a client.

Client groups are referenced in security policy in the same manner in which individual clients are referenced.

Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

They accept only a single argument

They can be nested only to two levels

Arguments can only be column values or constants

They always return a single result row for every row of a queried table

They can return a data type value different from the one that is referenced

The same key is used for encryption and decryption.

It is commonly used to create digital certificate signatures.

It uses two keys: one for encryption and a different key for decryption.

An attacker can decrypt data if the attacker captures the key used for encryption.

Class B’s constructor is public.

Class B’s constructor has no arguments.

Class B’s constructor includes a call to this（）.

Class B’s constructor includes a call to super（）.

IKE SA is bidirectional.

IPsec SA is bidirectional.

IKE SA is established during phase 2 negotiations.

IPsec SA is established during phase 2 negotiations.

It requires relinking of the Oracle binary.

It does not require database instance shutdown.

It can detect conflicts between two online patches.

It is available for installing all patches on all platforms.

It works only in a single database instance environment.

Tunnels are initiated by the LAC

Tunnels are initiated by the LNS

By default, subscriber authentication occurs on the LNS

By default, subscriber authentication occurs on the LAC

The RE controls and monitors the chassis.

The RE manages the Packet Forwarding Engine (PFE).

The RE receives a copy of the forwarding table from the forwarding plane.

The RE implements class of service (COS).

It is built by Automatic Tuning Optimizer.

It cannot be stored persistently in the data dictionary.

It can be used by the query optimizer automatically.

It can be created manually by using the CREATE PROFILE command.

A chassis cluster consists of two devices.

A chassis cluster consists of two or more devices.

Devices participating in a chassis cluster can be different models.

Devices participating in a chassis cluster must be the same models