What are two primary purposes of Layer 2 detection in Cisco IPS networks?

What are two primary purposes of Layer 2 detection in Cisco IPS networks? (Choose two.)

A.
identifying Layer 2 ARP attacks

B.
detecting spoofed MAC addresses and tracking 802.1X actions and data communication after a
successful client association

C.
detecting and preventing MAC address spoofing in switched environments

D.
mitigating man-in-the-middle attacks