When is it useful to schedule rules rather than have them run in real time?
A. when a network device is down
B. when events are occurring less frequently than usual
C. when you anticipate a worm or virus attack
D. when you need to minimize impact on system performance
C is incorrect