the system can check for suspicious patterns of activity in an attempt to detect a security violation

a time sharing a system that counts the number of incorrect passwords given

both 1) the system can check for suspicious patterns of activity in an attempt to detect a security violation and 2) a time sharing a system that counts the number of incorrect passwords given

none of these

could be included in a compiler

pose a difficult problem because, to detect them

both 1) could be included in a compiler and 2) pose a difficult problem because, to detect them

none of these

threat monitoring

audit log

both (a) and (b)

none of these

is a process that uses the spawn mechanism to clobber system performance

spawns copies of itself, using up system resources and perhaps locking out system use by all other processes.

both 1) is a process that uses the spawn mechanism to clobber system performance and 2) spawns copies of itself, using up system resources and perhaps locking out system use by all other processes.

none of these

simply records the time

user

type of all access to an object

all of these