How does Guardium handle correlation alerts?

A.
The appliance sends signals to all registered probes and is able to correlate their responses.
B.
The returned values of a large number of queries are joined and the appliance correlates these
data to generate alerts.
C.
The Anomaly Detection Engine runs queries that correlate exceptions or policy rule violations
on a scheduled basis.
D.
Different alerts are correlated with one another and a higher priority alert is generated.