Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)
A . NGFW policy-based mode does not require the use of central source NAT policy
B . NGFW policy-based mode can only be applied globally and not on individual VDOMs
C . NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
D . NGFW policy-based mode policies support only flow inspection

Answer: C,D