If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude The system files have been copied by a remote attacker The system administrator has created an incremental backup The system has been compromised using a t0rnrootkit Nothing in particular as these can be operational files

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)

Module 7 : Linux and Mac Forensics

Questions available : 36 You are not logged in.
Please Login for track your learning progress

Q. No: 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 |

Go to Question No.

Question No 33

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

Bookmark this Question

QID: 808

If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude

A: The system files have been copied by a remote attacker

B: The system administrator has created an incremental backup

C: The system has been compromised using a t0rnrootkit

D: Nothing in particular as these can be operational files

WELCOME TO ONLINE EXAM PREPARATION SYSTEM

Join Online Exam

Certification Examinations