Alarms are events that require immediate attention and sometimes action. Any time a sensor detects activity when it is armed is an Alarm. Alarms usually cause the siren to sound and can be reported to Central Station.
Normal Activity includes any activity detected that is not an Alarm because the sensor was not armed when the activity was detected. When a door opens and the system is not armed, that is Normal Activity.