Which two tasks can be performed by analyzing the logs of a traditional stateful firewall? (Choose two.)
A . Confirm the timing of network connections differentiated by the TCP 5-tuple.
B . Audit the applications used within a social networking web site.
C . Determine the user IDs involved in an instant messaging exchange.
D . Map internal private IP addresses to dynamically translated external public IP addresses.
E . Identify the malware variant carried by an SMTP connection
Answer: AD