MENU
Where would an analyst find information about shells spawned by root, Kernel Module loads, and wget/curl usage?
Suggested Answer: B
Get Premium CCFH-202b Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Linux Sensor report is where an analyst would find information about shells spawned by root, Kernel Module loads, and wget/curl usage. The Linux Sensor report is a pre-defined report that provides a summary view of selected activities on Linux hosts. It shows information such as process execution events, network connection events, file write events, etc. that occurred on Linux hosts within a specified time range. The Sensor Health report, the Sensor Policy Daily report, and the Mac Sensor report do not provide the same information.
19 comments · newest first
MA
Maybelle
10 days ago
Same, it's crucial for understanding the system.
DI
Dion
15 days ago
I hope they focus on Linux in the exam.
FL
Flo
20 days ago
Definitely, it covers kernel activities.
DE
Delila
25 days ago
I feel confident about B too.
BE
Benedict
1 month ago
B) Linux Sensor report has the right details.
PA
Pamella
1 month ago
D) Mac Sensor report? Not relevant here.
NI
Nickolas
1 month ago
C) Sensor Policy Daily report seems too general.
JO
Jolene
2 months ago
A) Sensor Health report could be misleading.
MA
Maxima
2 months ago
Agreed, it makes sense for Linux info.
DE
Delila
2 months ago
I think it's B) Linux Sensor report.
GE
Gertude
2 months ago
C) Sensor Policy Daily report could have some info too.
GL
Glendora
2 months ago
Wait, are we sure about that? Seems off.
BI
Billy
2 months ago
No way, it's B) for sure!
CA
Candida
3 months ago
I thought it was A) Sensor Health report?
SH
Shalon
3 months ago
Definitely B) Linux Sensor report!
JU
Junita
3 months ago
I could be wrong, but I have a vague memory of wget/curl being discussed in the Linux Sensor report too.
EM
Emilio
3 months ago
I practiced a similar question, and I feel like the Sensor Health report was mentioned in that context.
MI
Mindy
3 months ago
I'm not entirely sure, but I remember something about the Sensor Policy Daily report covering system activities.
GR
Grover
3 months ago
I think the Linux Sensor report might be the right choice since it deals with Linux-specific activities.