Which of the following can be monitored by using the host intrusion detection system (HIDS)? Each correct answer represents a complete solution. Choose two.

Computer performance monitoring (CPU usage, memory, etc.) is handled by dedicated performance monitoring tools such as Windows Performance Monitor or Nagios, not by HIDS, which is focused on security event detection rather than resource utilization.

HIDS monitors critical operating system and application files for unauthorized modifications, deletions, or additions by comparing current state against known-good baselines. Changes to system files are a primary indicator of compromise that HIDS is specifically designed to detect.

HIDS performs file system integrity checking, typically using cryptographic hashing (e.g., MD5, SHA-256), to detect any tampering with files, directories, or configuration data on the monitored host. This is a core HIDS function described in NIST SP 800-94.

Storage space monitoring is a capacity planning and systems administration function performed by disk management utilities, not a security-oriented capability of HIDS, which does not track available free space.