Free Preparation Discussions
MENU
CompTIA CV0-004 Exam - Topic 1 Question 17 Discussion
Topic #: 1
The company's IDS has reported an anomaly. The cloud engineer remotely accesses the cloud instance, runs a command, and receives the following information:
Which of the following is the most likely root cause of this anomaly?
The output from the 'ps' command indicates there is a process running under the UID (User ID) of 0, which is the root user, and the command that was run is '/var/www/command.py'. Given that the normal Apache processes are running under their own UID (65535), this suggests that a command was executed with root privileges that typically should not have such high-level access. This is a strong indicator of privilege escalation, where an unauthorized user or process gains elevated access to resources that are normally protected from an application or user. Reference: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg
Lorean
10 months agoXochitl
10 months agoMitzie
10 months agoNicolette
10 months agoYuonne
11 months agoDominque
11 months agoMadalyn
11 months agoMoon
11 months agoDottie
11 months agoMerlyn
11 months agoGregoria
11 months agoBenedict
11 months agoRonny
11 months agoTresa
11 months agoEugene
12 months agoBrent
12 months agoAntonio
2 years agoTarra
2 years agoDeonna
2 years agoDenise
2 years agoRobt
2 years agoNu
2 years agoCarline
2 years agoTawna
2 years agoGiuseppe
2 years agoElise
2 years agoSherita
2 years agoElizabeth
2 years agoMila
2 years agoJamie
2 years agoAbel
2 years agoIsidra
2 years agoDawne
2 years agoTorie
2 years agoChantay
2 years agoRosamond
2 years agoKristel
2 years agoEmerson
2 years ago