Which configuration objects can be selected for the Source filed of a firewall policy? (Choose two.)

FQDN addresses are dynamic objects that can be used in firewall policies to represent a group of IP addresses associated with a specific domain name, allowing flexible source identification.

An IP pool is typically used for source NAT (SNAT) or destination NAT (DNAT) and defines a range of IP addresses for *translation*, not for specifying the *source* of traffic in a policy match.

User or user groups allow authentication-based policy enforcement, where the source of traffic is defined by the authenticated identity rather than just an IP address, providing granular access control.

A firewall service defines the *destination port and protocol* of traffic, which is configured in the "Service" field of a firewall policy, not the "Source" field.