Multiple Choice
A security analyst is investigating a security breach. Upon inspection of the audit an access logs, the analyst notices the host was accessed and the /etc/passwd file was modified with a new entry for username "gotcha" and user ID of 0. Which of the following are the MOST likely attack vector and tool the analyst should use to determine if the attack is still ongoing? (Select TWO)
A) Logic bomb
B) Backdoor
C) Keylogger
D) Netstat
E) Tracert
F) Ping
Correct Answer:
Verified
Correct Answer:
Verified
Q1094: An audit has revealed that database administrators
Q1095: Which of the following are considered to
Q1096: Fuzzing is used to reveal which of
Q1097: Moving laterally within a network once an
Q1098: Which of the following command line tools
Q1100: A security, who is analyzing the security
Q1101: Which of the following would be considered
Q1102: Which of the following uses tokens between
Q1103: An organization wants to deliver streaming audio
Q1104: Which of the following is the summary