Discuss GAQM CPEH-001 Exam Topic 1 Question 126

Rebecca is a security analyst and knows of a local root exploit that has the ability to enable local users to use available exploits to gain root privileges. This vulnerability exploits a condition in the Linux kernel within the execve() system call. There is no known workaround that exists for this vulnerability. What is the correct action to be taken by Rebecca in this situation as a recommendation to management?

ARebecca should make a recommendation to disable the () system call

BRebecca should make a recommendation to upgrade the Linux kernel promptly

CRebecca should make a recommendation to set all child-process to sleep within the execve()

DRebecca should make a recommendation to hire more system administrators to monitor all child processes to ensure that each child process can't elevate privilege

Suggested Answer: B

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Veronique 3 days ago

C seems impractical. Sleeping child processes won't fix the root issue.

Angelyn 8 days ago

A is risky. Disabling execve() could break many applications.

Lashawn 13 days ago

Agreed! A kernel upgrade can patch the exploit.

Jovita 19 days ago

I think B is the best choice. Upgrading the kernel is crucial.

Margot 24 days ago

Definitely B. Timely upgrades are key to security.

Dalene 29 days ago

D is overkill. We need a technical fix, not just more admins.

Sophia 1 month ago

C seems too risky. Sleeping child processes won't fix the exploit.

Pearlene 1 month ago

A) Disabling execve() isn't practical. It’s essential for many processes.

Tyisha 1 month ago

Agreed! A kernel upgrade can patch vulnerabilities.

Paz 2 months ago

I think B is the best option. Upgrading the kernel is crucial.

Gracie 2 months ago

Agree with B, keeping the kernel updated is crucial for security.

Jamal 2 months ago

C seems pointless, just setting processes to sleep won't fix the issue.

Mariann 2 months ago

Surprised there's no workaround for this, that's pretty serious!

Edmond 2 months ago

I don't think disabling execve() is practical, A is a bad idea.

Daniela 3 months ago

Definitely B, upgrading the kernel is the best move!

Stephaine 3 months ago

Just upgrading the kernel should do the trick, right?

Rupert 3 months ago

I doubt hiring more admins will really fix the root issue.

Eun 3 months ago

Agreed, B is the best option here!

Gail 3 months ago

Wait, isn't disabling execve() too extreme?

Launa 3 months ago

Definitely B, upgrading the kernel is crucial!

Ettie 4 months ago

Hiring more system administrators sounds excessive. I feel like there should be a more technical fix rather than just adding more people to monitor processes.

Glory 4 months ago

I think we practiced a similar question where upgrading the kernel was the best option. It makes sense to patch vulnerabilities as soon as possible.

Ngoc 4 months ago

I’m not entirely sure, but disabling the execve() system call might cause more issues than it solves. It’s a critical function, right?

Juan 5 months ago

I remember discussing the importance of kernel updates in class. Upgrading the Linux kernel seems like the most straightforward solution here.

GAQM CPEH-001 Exam - Topic 1 Question 126 Discussion