A Security Analyst Is Investigating a Compromised Linux Server

question 132

Multiple Choice

A security analyst is investigating a compromised Linux server. The analyst issues the ps command and receives the following output: Which of the following commands should the administrator run NEXT to further analyze the compromised system?

• A) strace /proc/1301
• B) rpm -V openssh-server
• C) /bin/ls -l /proc/1301/exe
• D) kill -9 1301

---

Definitions:

Absence

The state of being away from a place or person, or the neglect to perform a duty or requirement.

Invoice

A document issued by a seller to a buyer listing the goods or services provided, their prices, and the total amount due.

Enforceable

A legal term denoting that an agreement or contract is legally binding and can be upheld in court.

Statute of Frauds

A legal principle that requires certain types of contracts to be in writing and signed by all parties involved in order to be enforceable.