Which of the following pieces of information can be included in the Destination Address field of a firewall policy?

An IP address pool is primarily used for Source NAT (SNAT) and is configured in the Source NAT field of a policy or as an explicit outbound interface IP, not as a destination address.

In FortiGate firewall policies, the Destination Address field defines the target of the traffic. This can be an explicit actual IP address (e.g., a host or subnet), an IP address group containing multiple addresses, or a Virtual IP (VIP) which represents a public-facing IP that the FortiGate translates to an internal server's private IP for inbound connections.

This choice is incomplete as it omits Virtual IP addresses, which are valid destinations for inbound policies.

This choice is too restrictive, as firewall policies commonly use address groups and Virtual IPs in addition to single actual IP addresses.