An Email Containing a URL Passes Through the Cisco ESA

An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [e-mail], the recipients are [e-mail], [e-mail], [e-mail], and [e-mail]. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email. Which two criteria must be used by the administrator to achieve this? (Choose two.)

A) Subject contains "TestDocument"
B) Sender matches test1.com
C) Email body contains a URL
D) Date and time of email
E) Email does not match [e-mail]