Which three statements about the Cisco IPS appliance Event Store are true? (Choose three.)
A.
The Event Store is accessible through the CLI, Cisco IDM, Cisco ASDM, or SDEE.
B.
The Event Store is a circular, first-in first-out buffer.
C.
The Event Store can be configured to be located on a remote server.
D.
The size of the Event Store depends on the Cisco IPS appliance platform.
E.
Each virtual sensor has its own Event Store.
F.
If the Event Store is full, the Cisco IPS appliance performs an automatic graceful shutdown.
Explanation:
http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_system_architectur e.html