Which type of API is being used when a security application notifies a controller within a software-defined network architecture about a specific security threat? (Choose Two)