When fragmented traffic is processed by the IPS engine, two steps are performed. First, the IPS engine identifies IP fragments.

What is the second step?

A.
detecting fragment chains

B.
checking fragments for overlaps, duplicates, or fragmented packets of the wrong length

C.
reassembling packets and serializing them in the correct order for further inspection

D.
checking a TCP packet’s length and TTL