A security administrator was informed that a server unexpectedly rebooted. The administrator received an export of syslog entries for analysis: 

Which of the following does the log sample indicate? (Choose two.) 

Answer options:

A. A root user performed an injection attack via kernel module
B. Encrypted payroll data was successfully decrypted by the attacker
C. Jsmith successfully used a privilege escalation attack
D. Payroll data was exfiltrated to an attacker-controlled host
E. Buffer overflow in memory paging caused a kernel panic
F. Syslog entries were lost due to the host being rebooted

CE