Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil 112-57 Exam - Topic 8 Question 12 Discussion

Wesley, a professional hacker, deleted a confidential file in a compromised system using the ''/bin/rm/'' command to deny access to forensic specialists.Identify the operating system on which Don has performed the file carving act.
D) Linux
A) Windows
B) Android
C) Mac OS

Eccouncil 112-57 Exam - Topic 8 Question 12 Discussion

Actual exam question for Eccouncil's 112-57 exam
Question #: 12
Topic #: 8
[All 112-57 Questions]

Wesley, a professional hacker, deleted a confidential file in a compromised system using the ''/bin/rm/'' command to deny access to forensic specialists.

Identify the operating system on which Don has performed the file carving act.

Show Suggested Answer Hide Answer
Suggested Answer: D

The command path /bin/rm is a hallmark of UNIX/POSIX-style operating systems, where core userland utilities are commonly stored under directories such as /bin, /sbin, and /usr/bin. The utility rm (remove) is the standard UNIX command used to delete directory entries that reference a file's data blocks on disk. This layout and command structure do not match Windows, which uses different filesystem conventions (drive letters, backslashes, and Windows-native executables) and does not provide /bin/rm as a native path. Android, while Linux-kernel-based, typically exposes shell utilities through environments like /system/bin (and newer systems may use toybox/busybox variants), not the classic /bin hierarchy expected on general-purpose UNIX systems. Between the remaining options, both Linux and macOS are UNIX-like and can include an rm command; however, in digital forensics training and examination contexts, the explicit reference to /bin/rm is most commonly used to indicate a Linux/UNIX command-line environment on a compromised host. Therefore, the best single-choice answer from the provided options is Linux (D).


Contribute your Thoughts:

0/2000 characters
Brice
4 days ago
Linux makes sense. Windows doesn't use that command at all.
upvoted 0 times
...
Wilda
9 days ago
I agree, Linux is the right choice. The "/bin/rm/" command is classic.
upvoted 0 times
...
Dominic
14 days ago
Definitely Linux. That command is specific to Unix-like systems.
upvoted 0 times
...
Jettie
19 days ago
Seems sketchy, but yeah, /bin/rm is classic Linux.
upvoted 0 times
...
Delbert
24 days ago
Linux for sure, but I wonder how he got in there.
upvoted 0 times
...
Vanna
30 days ago
Wait, are we sure it's not Mac OS? They use similar commands.
upvoted 0 times
...
Lillian
1 month ago
Totally agree, it's all about that Unix-like system!
upvoted 0 times
...
Dannette
1 month ago
That's definitely a Linux command.
upvoted 0 times
...
Thea
2 months ago
I definitely remember that Linux uses the "/bin/rm/" command for file deletion, so I would lean towards that being the right answer.
upvoted 0 times
...
Cecil
2 months ago
I thought Mac OS also uses Unix commands, but I can't recall if "/bin/rm/" is exclusive to Linux. This is tricky!
upvoted 0 times
...
Tamesha
2 months ago
I’m not entirely sure, but I feel like the "/bin/rm/" command is more commonly associated with Linux. I think I saw a similar question in our practice tests.
upvoted 0 times
...
Avery
2 months ago
I remember studying the command line, and I think the "/bin/rm/" command is specific to Unix-like systems. So, it might be Linux or Mac OS.
upvoted 0 times
...

Save Cancel