File timestamps can be useful for all of the following except
A) Identifying files manipulated by the hacker
B) Determine how the hacker compromised the system
C) Identifying the attacker
D) Preventing similar attacks on other similar systems

Question

Quizplus · Accepted Answer

File timestamps can help in identifying manipulated files, understanding how a system was compromised, and in preventing future attacks by understanding the method of attack. However, they do not directly identify the attacker, as timestamps do not contain information about the identity of the user or attacker.

File Timestamps Can Be Useful for All of the Following