What are two typical activities that are conducted as part of Security Assessment? (Choose two.)

A.
Perform intrusion audits.

B.
Create a performance baseline for Security Assessment.

C.
Categorize security incidents.

D.
Assess network infrastructure software and configurations.