Which two tasks can be performed by analyzing the logs of a traditional stateful firewall? (Choose two.)

Which two tasks can be performed by analyzing the logs of a traditional stateful firewall? (Choose two.)
A . Confirm the timing of network connections differentiated by the TCP 5-tuple
B . Audit the applications used within a social networking web site.
C . Determine the user IDs involved in an instant messaging exchange.
D . Map internal private IP addresses to dynamically translated external public IP addresses
E . Identify the malware variant carried by ^n SMTP connection

View Answer

Answer: AD