A. The daemon's binary was changed.
The greatest security concern, based on the log entries, is that the daemon's binary has been changed. The entries show that the MD5 hash value of the binary file "ircd.exe" changed from 1FD92EA11890CD4B7A85133FF780EB09 to 90EB29AE33DFA9AA00B16788934801EF between April 18 and April 22. A change in the hash value indicates that the binary file has been altered in some way. This is a red flag for security as it could mean that an attacker has replaced the original binary with a malicious one, or that an otherwise trusted software update was made to introduce a vulnerability. The security analyst should investigate this change further to determine the cause and assess any potential impact.
PIDs can change if they are executed on different days, the timestamps do not belong to the monitoring time but to the date/time when the process was executed. Going with A here due to the most obvious here is that binary file changed somehow because of the difference with the hash.
This section is not available anymore. Please use the main Exam Page.CS0-002 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
gnnggnnggnng
Highly Voted 2 years, 2 months agoTheStudiousPeepz
Most Recent 2 years, 1 month agodb97
2 years, 2 months ago2Fish
2 years, 1 month ago