Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity?

A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)
A . Informs WildFire and sends up a signature to the Cloud
B . Collects forensic information about the event
C . Communicates the status of the endpoint to the ESM
D . Notifies the user about the event
E . Remediates the event by deleting the malicious file

Answer: B,C,D

Explanation:

https://investors.paloaltonetworks.com/node/11156/html