The Cisco IPS appliance global correlation and reputation filtering features depend on which two of these? (Choose two.)

A.
anomaly detection

B.
OS fingerprinting

C.
Cisco SensorBase

D.
watch list ratings

E.
event action overrides

F.
DNS

Explanation:
http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/securi ty_manager/4.1/user/guide/ipsglobe.html