Câu 24: Lead Implementer: PECB Certified ISO/IEC 27001 Lead Implementer

Can Socket Inc. find out that no persistent backdoor was placed and that the attack was initiated from an employee inside the company by reviewing event logs that record user faults and exceptions? Refer to scenario 3.

1. A. Yes, Socket Inc. can find out that no persistent backdoor was placed by only reviewing user faults and exceptions logs
2. B. No, Socket Inc. should also have reviewed event logs that record user activities
3. C. No, Socket Inc. should have reviewed all the logs on the syslog server — đáp án hiện tại