Which statements are correct regarding application control? (Choose two.)

Application control on FortiGate leverages the Intrusion Prevention System (IPS) engine, which performs deep packet inspection to identify and categorize applications based on their unique signatures and behavioral patterns.

Application control is not based on the antivirus (AV) engine; the AV engine is primarily for detecting malware, while application control focuses on identifying and managing applications.

Application control can be applied to SSL encrypted traffic, provided that SSL inspection (deep inspection) is enabled on the FortiGate unit. This allows the FortiGate to decrypt, inspect, and then re-encrypt the traffic, enabling application identification and control within encrypted sessions.

This statement is incorrect because application control can indeed be applied to SSL encrypted traffic if SSL deep inspection is configured and enabled on the FortiGate.