Identify two statements that correctly describe OWSM policy attachments in Oracle SOA Suite

Although you can attach as well as detach security policies in JDeveloper, you can only detach them in Enterprise Manager.

An applicationdeveloper typically uses JDeveloper to create new security policies rather than select them froma prebuilt list.

When you use JDeveloper to associate a security policy with a web service, the policy is not really attached until application deployment.

OWSM policies can be attached and detached with WLST.