Mile2_Security
MK0-201 · Question #5
MK0-201 Question #5: Real Exam Question with Answer & Explanation
Sign in or unlock MK0-201 to reveal the answer and full explanation for question #5. The question stem and answer options stay visible for context.
Question
If an attacker gets Administrative-level access, why cant the entries in the Event log be trusted with certainty? Choose two.
Options
- AEntries in the event log are not digitally signed
- BThe attacker may have been able to simply clear the event log, thus erasing evidence of the
- CTools like Winzapper allow the attacker to selectively delete log entries associated with the
- DEvent logs have NTFS permissions of Everyone Full Control and thus can be easily edited
Unlock MK0-201 to see the answer
You've previewed enough free MK0-201 questions. Unlock MK0-201 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.