Refer to the exhibit. A security analyst is investigating unusual activity from an unknown IP address Which type of evidence is this file1?

Indirect evidence, also known as circumstantial evidence, does not directly prove a central fact but rather provides supporting circumstances from which a fact can be logically deduced. A file from an unknown IP requires additional analysis and correlation with other evidence to establish its true nature and significance in an investigation, making it an inferential piece of evidence.

Best evidence refers to the most original or reliable form of evidence, which is a quality of evidence, not its inferential nature, and a random file isn't inherently 'best' without context.

Corroborative evidence supports or confirms other evidence, but the question asks about the type of *this* specific file's evidence on its own, not its relationship to other evidence.

Direct evidence directly proves a fact without the need for inference (e.g., an eyewitness or a log explicitly stating an event occurred), which an unexplained file from an unknown IP does not do on its own.