In a Cisco FirePOWER instrusion policy, which two event actions can be configured on a rule? (Choose two.)