PassGuide 642-545

Which two statements best describe the Cisco Security MARS Event Management partial screen displayed? (Choose two)

A.
Info/Misc/FW is a user-defined rule that normalizes events into a single event.

B.
Event ID 1104001 is a low-severity event.

C.
Event ID 1104001 belongs in an event group that includes generic informational events from firewalls.

D.
PIX and FWSM syslog messages (104001) are normalized into a single event (Event ID 1104001).