Which two statements are correct about screens?

Screens are attack detection and prevention mechanisms applied to SRX security zones. Juniper documentation explains that predefined screen options can be enabled for each security zone to detect and block traffic considered harmful. Because a screen profile is a reusable configuration object, the same screen can be referenced by more than one security zone, making option A correct. Screens are evaluated on traffic entering the firewall through an interface bound to a zone, so the screen is applied based on the ingress security zone, making option D correct. Option B is incorrect because screens are not described simply as “first path only”; they are zone-based protection mechanisms applied to incoming traffic. Option C is also incorrect because screen options include IP, ICMP, TCP, UDP, flood, and reconnaissance protections.