Which two statements are true regarding the Cisco IPS appliance traffic normalizer? (Choose two.)
A.
It only operates in inline mode.
B.
It operates in one of three modes: symmetric, loose, or asymmetric.
C.
It can help prevent false negatives that are caused by evasions.
D.
It can help ensure that Layer 7 traffic conforms to its protocol specifications.
E.
It will not modify fragmented IP traffic.
Explanation:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/white_paper_c11- 459025.html