To capture only the files that have changed since the last full backup, an administrator should perform which of the following backups?