ECCouncil Exam Questions

When a system is compromised, attackers often try to disable auditing, in Windows 7; modifications t

When a system is compromised, attackers often try to disable auditing, in Windows 7;
modifications to the audit policy are recorded as entries of Event ID____________.

A.
4902

B.
3902

C.
4904

D.
3904