does apt upgrade & full-upgrade packages from Security Updates (Debian Security Advisories (DSA))

["jindam, vani" <jindam.vani@disroot.org>]

i have only deb http://deb.debian.org/debian bullseye main contrib non-free in my sources.list. 

does apt upgrade & full-upgrade packages from Security Updates (Debian Security Advisories (DSA))?

which is correct?
deb http://security.debian.org/debian-security bullseye-security main contrib non-free (1)
deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free


(1) https://www.debian.org/security/

regards,
jindam, vani

toots: @jindam_vani@c.im
others: en.wikipedia.org/wiki/User:Jindam_vani