Which of the following are default settings when using the Policy Builder to build a security policy based on the QA lab deployment scenario? (Choose 2)

In the QA lab scenario, learned entities such as URLs and parameters are placed directly into the enforced policy rather than staging, because QA traffic is assumed to be clean and representative.

In the QA lab scenario, Policy Builder treats attack signatures as already validated by prior testing, so they are enforced directly without staging, unlike a production learning scenario.

The QA lab scenario assumes the environment is pre-tested and stable, so the Policy Builder places the security policy directly into blocking mode rather than transparent mode.

Tightening in the QA lab scenario is applied broadly across all entity types, not restricted to only file types and parameters.