Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam 312-49v10 All Questions
Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

ECCouncil CHFI v10 312-49v10 Question # 76 Topic 9 Discussion

312-49v10 Exam Topic 9 Question 76 Discussion:
Question #: 76
Topic #: 9

If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?


A.

The system files have been copied by a remote attacker


B.

The system administrator has created an incremental backup


C.

The system has been compromised using a t0rnrootkit


D.

Nothing in particular as these can be operational files


Get Premium 312-49v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.