Which is the following statement are true regarding application control? (choose two)

While some applications commonly use specific TCP destination port numbers, Application Control identifies applications based on signatures, behavioral analysis, and other methods, not solely on port numbers, as applications can often use non-standard ports or port hopping.

FortiGate Application Control operates primarily using flow-based inspection, processing traffic in real-time, rather than acting as a full proxy for every application, although some application-specific controls might engage proxy-like features for deeper inspection.

FortiGate Application Control uses various techniques, including deep packet inspection and heuristic analysis, to identify applications even within encrypted traffic, such as SSL/TLS, without necessarily requiring full SSL decryption.

Once traffic is identified by Application Control, firewall policies can leverage this information to apply granular traffic shaping rules, prioritizing or limiting bandwidth for specific applications.