An Administrator Thinks the UNIX Systems May Be Compromised, but a Review

question 187

Multiple Choice

An administrator thinks the UNIX systems may be compromised, but a review of system log files provides no useful information. After discussing the situation with the security team, the administrator suspects that the attacker may be altering the log files and removing evidence of intrusion activity. Which of the following actions will help detect attacker attempts to further alter log files?

• A) Enable verbose system logging
• B) Change the permissions on the user's home directory
• C) Implement remote syslog
• D) Set the bash_history log file to "read only"

---

Definitions:

Potential

The inherent ability or capacity for growth, development, or coming into being.

Behaviorism

The view that psychology should be an objective science that studies behavior without reference to mental processes. Most research psychologists today agree with the first part but not with the second part.

Mental Processes

refer to internal, subjective experiences we infer from behavior, including thoughts, beliefs, and feelings.

Observable Human Activity

Actions or behaviors that can be seen and measured directly by others.