Which two modes are associated with this type of policy?

An administrator creates a SpoofGuard policy for specific networks.
Which two modes are associated with this type of policy? (Choose two.)
A. Automatically trust IP assignments on their first use
B. Manually inspect and approve all IP assignments before use
C. Manually approve IP assignments listed in the Host file before use
D. Automatically inspect and trust IP assignments on every use