A. The SurfControl server in the cloud provides the SRX device with the category of the URL as well as the reputation of  the URL. 
B. The SurfControl server in the cloud provides the SRX device with only the category of the URL.
C. The SurfControl server in the cloud provides the SRX device with only the reputation of the URL.
D. The SurfControl server in the cloud provides the SRX device with a decision to permit or deny the URL.