EC-Council
312-49V8 · Question #53
When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to the audit policy are recorded as entries of Event ID____________.
The correct answer is A. 4902. See the full explanation below for the reasoning.
Question
When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to the audit policy are recorded as entries of Event ID____________.
Options
- A4902
- B3902
- C4904
- D3904
How the community answered
(61 responses)- A70% (43)
- B5% (3)
- C8% (5)
- D16% (10)
Community Discussion
No community discussion yet for this question.