Study the following exhibit carefully. You work as the network administrator of a corporate Cisco
ASA security appliance with a Cisco ASA AIP-SSM. You are asked to use the AIP-SSM to protect
corporate DMZ web servers. The AIP-SSM has been configured, and a service policy has been
configured to identify the traffic to be passed to the AIP-SSM.
On which two interfaces would application of the service policy for the AIP-SSM be most effective
while causing the least amount of impact to Cisco ASA security appliance performance? (Choose
two.)

A.
dmz interface

B.
outside interface

C.
globally on all interfaces

D.
Internet interface