PassGuide 642-545
Which two statements best describe the Cisco Security MARS Event Management partial screen displayed? (Choose two)
A.
Info/Misc/FW is a user-defined rule that normalizes events into a single event.
B.
Event ID 1104001 is a low-severity event.
C.
Event ID 1104001 belongs in an event group that includes generic informational events from firewalls.
D.
PIX and FWSM syslog messages (104001) are normalized into a single event (Event ID 1104001).