SmartEvent Has Several Components That Function Together to Track Security

SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

A) Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
B) Correlates all the identified threats with the consolidation policy.
C) Collects syslog data from third party devices and saves them to the database.
D) Connects with the SmartEvent Client when generating threat reports.