A security administrator suspects that data on a server has been exfiltrated as a result of unauthorized remote access. Which of the following would assist the
administrator in confirming the suspicions? (Select TWO)

A.
Networking access control

B.
DLP alerts

C.
Log analysis

D.
File integrity monitoring

E.
Host firewall rules