Which of the following types of activities can be audited for security? Each correct answer represents a complete solution. Choose three.

Auditing file and object access tracks who accessed what files, when, and what actions they performed (e.g., read, write, delete), providing critical information for detecting unauthorized data manipulation or exfiltration.

While data downloading from the Internet can be monitored by network devices, it is generally categorized as network traffic monitoring or content filtering rather than a specific 'security auditing activity' in the same vein as system-level event logging of access to resources or authentication.

Auditing printer access logs who printed which documents, when, and from where, which is important for preventing unauthorized information disclosure and ensuring accountability for physical output.

Auditing network logons and logoffs tracks user authentication events, including successful and failed attempts, providing insights into potential brute-force attacks, unauthorized access, and user activity timelines.