Which two configurations does an administrator need to compare in order to see differences between the active configuration and potential changes if committed? (Choose two.)

'Device state' refers to the operational status and health of the device, not a specific configuration file for comparison of changes.

'Active' configuration is synonymous with 'running configuration' in this context; therefore, 'Candidate' and 'Running' are the two distinct configurations typically compared.

The candidate configuration refers to the set of changes an administrator has made but has not yet committed and applied to the firewall, representing the potential future state.

The running configuration represents the configuration that is currently active and operational on the firewall, providing the baseline against which proposed changes are evaluated.