Refer to the exhibit.

Which two elements in the table are parts of the 5-tuple? (Choose two.)

An engineer is analyzing a recent breach where confidential documents were altered and stolen by the receptionist Further analysis shows that the threat actor connected an externa USB device to bypass security restrictions and steal data The engineer could not find an external USB device Which piece of information must an engineer use for attribution in an investigation?

What are two differences between tampered disk images and untampered disk images'? (Choose two.)

An engineer needs to configure network systems to detect command and control communications by decrypting ingress and egress perimeter traffic and allowing network security devices to detect malicious outbound communications. Which technology should be used to accomplish the task?

Which type of verification consists of using tools to compute the message digest of the original and copied data, then comparing the similarity of the digests?