Which two statements about Cisco IDS are true?

Which two statements about Cisco IDS are true? (Choose two.)

A.
It is preferred for detection-only deployment.

B.
It is used for installations that require strong network-based protection and that include sensor tuning.

C.
It is used to boost sensor sensitivity at the expense of false positives.

D.
It is used to monitor critical systems and to avoid false positives that block traffic.

E.
It is used primarily to inspect egress traffic, to filter outgoing threats.