ECCouncil Exam Questions

When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications t

When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications to
the audit policy are recorded as entries of Event ID____________.

A.
3904

B.
4904

C.
4902

D.
3902