Which option describes the role of the Learning Accept Mode for anomaly detection?

Which option describes the role of the Learning Accept Mode for anomaly detection?

A.
It detects ongoing attacks and adds them to a database.

B.
It configures the anomaly detection zones.

C.
It identifies incomplete connections and flags them.

Explanation:
http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/sec
urity_manager/4-0/user/guide/CSMUserGuide_wrapper/ipsanom.html