Which of the following can be monitored by using the host intrusion detection system (HIDS)? Each correct answer represents a complete solution. Choose two.

Computer performance monitoring is a function of dedicated performance monitoring tools such as SNMP agents or OS performance counters, not intrusion detection systems.

File system integrity monitoring is a core HIDS function - it uses checksums and baseline comparisons to detect unauthorized additions, deletions, or modifications to files, which are common indicators of compromise.

Storage space monitoring is a capacity management task handled by system management utilities, and falls outside the scope of intrusion detection.

System files are a primary HIDS monitoring target because attackers frequently modify OS binaries or configuration files to maintain persistence; HIDS detects these changes by comparing current state against a known-good baseline.