What does the anomaly detection Cisco IOS IPS component detection?

What does the anomaly detection Cisco IOS IPS component detection?

A.
ARP Spoofing

B.
Worm-infected hosts

C.
Signature changes

D.
Network Congestion