When configuring a Cisco IOS zone-based policy firewall, which two actions can be applied to a traffic class? (Choose two.)