Which two statements are true regarding the Cisco IPS appliance traffic normalizer? (Choose two.)

A.
It only operates in inline mode.

B.
It operates in one of three modes: symmetric, loose, or asymmetric.

C.
It can help prevent false negatives that are caused by evasions.

D.
It can help ensure that Layer 7 traffic conforms to its protocol specifications.

E.
It will not modify fragmented IP traffic.

Explanation:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/white_paper_c11- 459025.html