Which signature action can be configured only on an IDSM sensor in IPS mode?

Which signature action can be configured only on an IDSM sensor in IPS mode?

A.
log packets containing the attacker and victim address pair

B.
modify data in the packet

C.
send a request to block a connection

D.
terminate the TCP flow