a server in the data center that chris is responsible for monitoring unexpectedly connects to an off-site ip address and transfers 9gb of data to the remote system. what type of monitoring should chris enable to best assist him in detecting future events of this type?