New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GAQM CPEH-001 Exam - Topic 6 Question 44 Discussion

Actual exam question for GAQM's CPEH-001 exam
Question #: 44
Topic #: 6
[All CPEH-001 Questions]

John is discussing security with Jane. Jane had mentioned to John earlier that she suspects an LKM has been installed on her server. She believes this is the reason that the server has been acting erratically lately. LKM stands for Loadable Kernel Module. What does this mean in the context of Linux Security?

Show Suggested Answer Hide Answer
Suggested Answer: D

Loadable Kernel Modules, or LKM, are object files that contain code to extend the running kernel, or so-called base kernel, without the need of a kernel recompilation. Operating systems other than Linux, such as BSD systems, also provide support for LKM's. However, the Linux kernel generally makes far greater and more versatile use of LKM's than other systems. LKM's are typically used to add support for new hardware, filesystems or for adding system calls. When the functionality provided by an LKM is no longer required, it can be unloaded, freeing memory.


Contribute your Thoughts:

0/2000 characters
Malcom
4 months ago
Option D is the correct one, no recompilation needed!
upvoted 0 times
...
Marget
4 months ago
Wait, so you can just add stuff without restarting? That’s wild!
upvoted 0 times
...
Troy
4 months ago
I thought you needed to reboot for that?
upvoted 0 times
...
Kami
4 months ago
Totally agree, it's super handy for updates.
upvoted 0 times
...
Gertude
5 months ago
LKM lets you add features to the kernel on the fly!
upvoted 0 times
...
Buck
5 months ago
I’m pretty sure the correct answer is about adding functionality without needing to recompile the kernel, which makes it more flexible for security updates.
upvoted 0 times
...
Makeda
5 months ago
I’m a bit confused; I thought LKMs were only for adding features after a reboot, but that doesn’t sound right now.
upvoted 0 times
...
Mendy
5 months ago
I think I came across a similar question about kernel modules in our practice tests, and I feel like the answer is related to adding functionality without recompiling.
upvoted 0 times
...
Francine
5 months ago
I remember studying LKMs and how they can be loaded or unloaded at runtime, but I'm not sure which option really captures that.
upvoted 0 times
...
Geraldo
5 months ago
Okay, let me think this through. The question says the data can be reconstructed, so we don't need the durability of Permanent tables. Transient tables sound like the most cost-effective option here.
upvoted 0 times
...
Isabella
5 months ago
The wording of the options is a bit tricky. I'm not sure if "all character data" means that ignorable white spaces will be included or not. I'll need to think this through carefully.
upvoted 0 times
...
Barrett
5 months ago
This is a good question. I'll think through the factors that might influence the cable tie spacing, such as the size and weight of the cables, to determine the best answer.
upvoted 0 times
...
Pearly
5 months ago
I'm leaning towards option C since it combines performance improvement with message screening. If Service A already has a security profile, it should streamline the communication. But, I remember our instructor saying something about potential overhead with that approach.
upvoted 0 times
...
Cherry
5 months ago
I'm a bit confused since the key looks valid, but I guess verifying it on both the switch and Cisco ISE could help. Option D sounds reasonable.
upvoted 0 times
...

Save Cancel