Which two modes for deploying Cisco TrustSec are valid?

Which two modes for deploying Cisco TrustSec are valid? (Choose two.)
A. low-impact
B. cascade
C. high availability
D. open
E. monitor