SUN
310-200 · Question #266
310-200 Question #266: Real Exam Question with Answer & Explanation
Sign in or unlock 310-200 to reveal the answer and full explanation for question #266. The question stem and answer options stay visible for context.
Question
You are informed that an unprivileged user has executed commands as the superuser. You decide to look at the log file for the su(1) command. The contents in the log file are: SU 12/07 11:50 + pts/6 gv1123-root SU 12/07 11:54 - pts/5 fb12-root SU 12/07 11:54 + pts/3 gv1123-root Sun 310-200 Exam SU 12/07 12:03 + pts/1 jjj-gv1123 You know the file has NOT been tampered with. Which two statements are true? (Choose two.)
Options
- AUser fb12 is suspected of having executed the commands.
- BUser gv1123 is suspected of having executed the commands.
- CThe commands might have been executed on pts/3.
- DThe commands might have been executed on pts/1.
- EUser jjj is not a suspect.
Unlock 310-200 to see the answer
You've previewed enough free 310-200 questions. Unlock 310-200 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.