ExamQuestions.com

Register
Login
CompTIA CySA+ Certification Exam (CS0-002) Exam Questions

CompTIA

CompTIA CySA+ Certification Exam (CS0-002)

114 / 160

Question 114:

A security analyst is investigating a compromised Linux server. The analyst issues the ps command and receives the following output: 
image
Which of the following commands should the administrator run NEXT to further analyze the compromised system? 

Answer options:

A. strace /proc/1301
B. rpm "V openssh-server
C. /bin/ls "l /proc/1301/exe
D. kill -9 1301