Which statement is correct about unified security policies on an SRX Series device?

Which two security features inspect traffic at Layer 7? (Choose two.)

Referring to the exhibit.

Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook.
Why is this problem happening?

A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)