Which two statements are true about Cisco IPS signatures? (Choose two.)
A.
Signatures trigger alerts only when they match a specific pattern of traffic.
B.
You can disable signatures and later re-enable them; however, this process requires the
sensing engines to rebuild their configuration, which takes time and could delay the processing of
traffic.
C.
A signature is a set of rules that pertain to typical intrusion activity.
D.
When network traffic matches a signature, the signature must generate an alert, but it can also
initiate a response action.
E.
You can enable and modify built-in signatures, but you cannot disable them.
F.
Some signatures can be triggered by the contents of a single packet.