Which two statements are true about Cisco IPS signatures? (Choose two.)

A.
Signatures trigger alerts only when they match a specific pattern of traffic.

B.
You can disable signatures and later re-enable them; however, this process requires the
sensing engines to rebuild their configuration, which takes time and could delay the processing of
traffic.

C.
A signature is a set of rules that pertain to typical intrusion activity.

D.
When network traffic matches a signature, the signature must generate an alert, but it can also
initiate a response action.

E.
You can enable and modify built-in signatures, but you cannot disable them.

F.
Some signatures can be triggered by the contents of a single packet.