Free Eccouncil 312-49 Exam Dumps - Page 3

Question No: 21

MultipleChoice

If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?

Options

AThe system files have been copied by a remote attacker

BThe system administrator has created an incremental backup

CThe system has been compromised using a t0rn rootkit

DNothing in particular as these can be operational files

Limited Time Offer

25%

Off