Which of the followings are two of the key criteria to use when sizing which Cisco Security MARS model to deploy? (Choose two.)

A.
monitoring and reporting protocols being used (e.g.,syslog versus SNMP)

B.
using a one-, two-, or three-tier Cisco Security MARS architecture

C.
events-storage requirements

D.
database-reporting requirements

E.
incoming events per second rate

F.
auto-mitigation requirements