Which three fields in a packet must match an IDP rule before that packet is examined for an attack?

Which three fields in a packet must match an IDP rule before that packet is examined for an attack?
(Choose three.)

A.
terminate match

B.
service

C.
destination address

D.
source address

E.
attack object