A network administrator needs to determine the sequence of a server farm's logs. Which of the following should
the administrator consider? (Choose two.)


A. Chain of custody
B. Tags
C. Reports
D. Time stamps
E. Hash values
F. Time offset