What are valid actions for a rule to take?

What are valid actions for a rule to take? (Select two.)

A.
generating a report

B.
executing a command

C.
sending a notification

D.
Creating a vulnerability

E.
adding a condition to a filter