Which of the following should the analyst investigate further?

An analyst is examining a system that is suspected of being involved in an intrusion. The analyst uses the command ‘cat/etc/passwd’ and receives the following partial output:

Based on the above output, which of the following should the analyst investigate further?
A. User ‘daemon’ should not have a home directory of /usr/sbin
B. User ‘root’ should not have a home directory of /root
C. User ‘news’ should not have a default shell of /bin/bash
D. User ‘mail’ should not have a default shell of /usr/sbin/nologin

CS0-002: CompTIA CySA+ Exam

FULL Printable PDF and Software. VALID exam to help you PASS.

comptia-exams

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.