A security investigator has detected an unauthorized insider reviewing files containing company secrets. Which of the following commands could the investigator use to determine which files have been opened by this user?
B. lsof
Explanation:
lsof (List Open Files) is a command that displays information about files that are currently open by active processes. It can be used to track which files a particular user has opened, which is crucial for investigating unauthorized access to sensitive data.
Why the other answers are incorrect:
A. ls: Lists files in a directory but does not provide information on which files are currently open or accessed by a user.
C. ps: Shows information about running processes, but not which files those processes have opened.
D. netstat: Displays network connections and routing tables, but does not provide details on file access.
The answer is B. lsof.
The lsof command is a Linux command that lists all open files on the system. This includes files that are opened by processes, sockets, and other file descriptors.
In this case, the security investigator can use the lsof command to determine which files have been opened by the unauthorized insider.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
044f354
3 months agoWutan
1 year, 3 months ago