Which two methods will be used by the Cisco Security MARS appliance to offer attack mitigation?

Which two methods will be used by the Cisco Security MARS appliance to offer attack mitigation? (Choose two.)

A.
automatically resetting attacker TCP connections

B.
automatically pushing commands to Layer 2 switches to shut down attacker ports

C.
automatically pushing ACLs to Layer 3 devices to block attacker traffic

D.
recommending ACLs to be manually pushed to Layer 3 devices such as routers and firewalls