Which two statements about the host-inbound-traffic parameter in a zone configuration are correct?

SSH Access (Option B): Host-inbound-traffic controls traffic destined to the SRX device itself (management/control plane). If host-inbound-traffic is not configured to allow SSH, then SSH access to the firewall is blocked.

Explicit Zone Configuration (Option D): For user-defined security zones, host-inbound-traffic must be explicitly configured to allow specific services (SSH, ICMP, SNMP, etc.).

Console Access (Option A): Console access is not controlled by host-inbound-traffic. Console access is always available directly.

Management Zone (Option C): In the management functional zone, host-inbound-traffic is implicitly allowed for management services, so this is not explicitly required.

Correct Statements: B and D