Which two are true about a VMware Service-defined Firewall? (Choose two.)

A. A firewall that allows you to use 3rd party features like IDS/IPS, threat protection, anti-bot, and anti-virus solutions

B. A firewall that blocks external access into your internal network based on IP services

C. A firewall that enforces policy for North-South traffic

D. A firewall that is auto scalable as new workloads are deployed

E. A firewall that provides East-West protection between internal applications

Reference: https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/vmware-nsx-service-defined-firewall.pdf