You can enable any number of conditions in a rule.
Conditions are AND-connected. This means: If you activate multiple conditions in a rule, the rule only matches if the traffic meets all active conditions.
See the Threat Defender documentation for further information on rule setup.