Free Preparation Discussions
MENU
CompTIA CV0-004 Exam - Topic 1 Question 17 Discussion
Topic #: 1
The company's IDS has reported an anomaly. The cloud engineer remotely accesses the cloud instance, runs a command, and receives the following information:
Which of the following is the most likely root cause of this anomaly?
The output from the 'ps' command indicates there is a process running under the UID (User ID) of 0, which is the root user, and the command that was run is '/var/www/command.py'. Given that the normal Apache processes are running under their own UID (65535), this suggests that a command was executed with root privileges that typically should not have such high-level access. This is a strong indicator of privilege escalation, where an unauthorized user or process gains elevated access to resources that are normally protected from an application or user. Reference: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg
Lorean
4 months agoXochitl
5 months agoMitzie
5 months agoNicolette
5 months agoYuonne
5 months agoDominque
6 months agoMadalyn
6 months agoMoon
6 months agoDottie
6 months agoMerlyn
6 months agoGregoria
6 months agoBenedict
6 months agoRonny
6 months agoTresa
6 months agoEugene
6 months agoBrent
6 months agoAntonio
2 years agoTarra
2 years agoDeonna
2 years agoDenise
1 year agoRobt
2 years agoNu
2 years agoCarline
2 years agoTawna
2 years agoGiuseppe
2 years agoElise
2 years agoSherita
2 years agoElizabeth
2 years agoMila
2 years agoJamie
2 years agoAbel
2 years agoIsidra
2 years agoDawne
2 years agoTorie
2 years agoChantay
2 years agoRosamond
2 years agoKristel
2 years agoEmerson
2 years ago