While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file for an organization's server. The analyst would like to investigate and compare contents of the current file with archived versions of files that are saved weekly. Which of the following tools will be MOST effective during the investigation?

Organizations considered "covered entities" are required to adhere to which compliance requirement?

Which of the following, when exposed together, constitutes PII? (Choose two.)