Q35
Single choice
Which of the following can be used to identify potential attacker activities without affecting production servers?