Exam CFR-310 topic 1 question 12 discussion

D. lsof, ifconfig, who, ps, ls, tcpdump Explanation: lsof: Lists open files and network connections, helping to see what files or sockets the laptop is accessing. ifconfig: Displays network interface information, which helps determine if the laptop is connected to the network and how. who: Shows who is logged into the system, helping identify any suspicious users. ps: Displays currently running processes, useful for determining what is actively running on the laptop. ls: Lists files in a directory, helpful for seeing the contents of important directories (e.g., /tmp, /etc). tcpdump: Captures network traffic for real-time analysis, allowing you to see what network activity the laptop is engaged in.

lsof: Lists open files and processes, which can help identify any suspicious or unauthorized processes running on the laptop. ifconfig: Displays network interface configuration, to gather information about the laptop's network connections and settings. who: Displays information about users logged into the system, providing insight into who may be using the laptop. ps: Lists currently running processes, to identify any suspicious or unauthorized processes. ls: Lists directory contents, to examine files and directories on the laptop. tcpdump: Captures and analyzes network traffic in real-time, providing visibility into network activity and helping to identify any suspicious or unauthorized network connections or traffic.

D. lsof, ifconfig, who, ps, ls, tcpdump. - lsof lists all open files on the system, including network sockets. This will help the investigator to determine which processes are accessing the network. - ifconfig displays the network configuration of the laptop. This will help the investigator to determine the laptop's IP address and other network settings. - who lists all users who are currently logged in to the laptop. This will help the investigator to identify who is using the laptop. - ps lists all running processes on the laptop. This will help the investigator to identify which processes are running and what they are doing. - ls lists the contents of the current directory. This will help the investigator to see what files are on the laptop. - tcpdump captures network traffic. This will help the investigator to see what data is being sent and received by the laptop.

D is correct...