Exam CFR-310 topic 1 question 49 discussion

D. Anti-forensic techniques Explanation: Anti-forensic techniques are methods used by attackers to hinder forensic investigations and avoid detection. These techniques include clearing logs, deleting files, and erasing caches to remove evidence of malicious activity. In this scenario, the missing critical files, cleared caches, and empty history/event logs indicate the use of anti-forensic measures to obstruct the investigation. Why the other answers are incorrect: A. System hardening techniques: These involve securing a system by reducing its attack surface, such as disabling unnecessary services and enforcing security policies, not hiding evidence. B. System optimization techniques: These are intended to improve system performance (e.g., improving resource usage), not related to deleting evidence or logs. C. Defragmentation techniques: These optimize disk space and improve read/write performance by rearranging file storage, but they do not involve removing or hiding files and logs.