When a system is compromised, attackers often try to disable auditing, in Windows 7;
modifications to the audit policy are recorded as entries of Event ID____________.

A.
3904

B.
4904

C.
4902

D.
3902