which security related anomalies?

A protocol analyzer will most likely detect which security related anomalies?

A.
Many malformed or fragmented packets

B.
Passive sniffing of local network traffic

C.
Decryption of encrypted network traffic

D.
Disabled network interface on a server