EC-Council
312-49V9 · Question #49
When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to the audit policy are recorded as entries of Event ID____________.
The correct answer is A. 4902. See the full explanation below for the reasoning.
Question
When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to the audit policy are recorded as entries of Event ID____________.
Options
- A4902
- B3902
- C4904
- D3904
How the community answered
(33 responses)- A70% (23)
- B9% (3)
- C3% (1)
- D18% (6)
Community Discussion
No community discussion yet for this question.