The Cisco IPS sensor can obtain operating system identification data from which two sources? (Choose two.)

A.
passive operating system fingerprinting

B.
imported from Cisco SensorBase

C.
imported from Cisco Security MARS

D.
manual operating system mappings configured on the Cisco IPS appliance

E.
imported from Cisco Secure Desktop OS scan

Explanation:
http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/ime/ime_event_action_ru les.html