Which two statements about the host-inbound-traffic parameter in a zone configuration are correct?

SSH Access (Option B):Host-inbound-traffic controls traffic destined to the SRX device itself (management/control plane). If host-inbound-traffic is not configured to allow SSH, then SSH access to the firewall is blocked.

Explicit Zone Configuration (Option D):For user-defined security zones, host-inbound-traffic must be explicitly configured to allow specific services (SSH, ICMP, SNMP, etc.).

Console Access (Option A):Console access is not controlled by host-inbound-traffic. Console access is always available directly.

Management Zone (Option C):In the management functional zone, host-inbound-traffic is implicitly allowed for management services, so this is not explicitly required.

Correct Statements:B and D