If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?

exams 312-49v10 312-49v10 exam 0 Comments

If you see the files Zer0.tar.gz and copy.tar.gz on a Linux system while doing an investigation, what can you conclude?
A . The system files have been copied by a remote attacker
B . The system administrator has created an incremental backup
C . The system has been compromised using a t0rnrootkit
D . Nothing in particular as these can be operational files

Answer: D