A traffic log might list an application as "not-applicable" for which two reasons? (Choose two )

If the firewall fails to fully install the session state or context required for deep packet inspection and application identification, the application will be listed as 'not-applicable' because the App-ID engine cannot process it.

This reason is very similar to option D, both pointing to a lack of application data for identification, and is therefore not a distinct second reason.

If a TCP SYN packet is dropped, no session is established for application identification to occur, and the log entry would typically show a deny or drop action, not 'not-applicable' for the application field.

When a TCP connection is established but there is insufficient application data exchanged before the session terminates, the firewall cannot gather enough information to identify the application, resulting in an 'incomplete' or 'not-applicable' status.