If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?

Question

Options

• AThe system has been compromised using a t0rnrootkit
• BThe system administrator has created an incremental backup
• CThe system files have been copied by a remote attacker
• DNothing in particular as these can be operational files

• A
  9% (2)
• B
  9% (2)
• C
  4% (1)
• D
  78% (18)

No community discussion yet for this question.