Which option describes the role of the Learning Accept Mode for anomaly detection?

A.
It detects ongoing attacks and adds them to a database.

B.
It configures the anomaly detection zones.

C.
It identifies incomplete connections and flags them.

Explanation:
http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/sec
urity_manager/4-0/user/guide/CSMUserGuide_wrapper/ipsanom.html