Which two inspection modes can you use to configure a firewall policy on a profile-based next- generation firewall (NGFW)? (Choose two.)

Proxy-based inspection works at the application layer, fully reconstructing traffic streams (e.g., HTTP, FTP) to provide deep content analysis for detecting sophisticated threats.

Certificate inspection is a feature used for decrypting and inspecting SSL/TLS encrypted traffic, not a primary inspection mode for a firewall policy.

Flow-based inspection analyzes traffic as it passes through the FortiGate without full content reconstruction, focusing on identifying threats efficiently using patterns and signatures within the data stream.

Full Content inspection describes the depth of inspection rather than a configurable inspection mode; the available modes are Flow-based and Proxy-based.