nerdexam
CompTIA

CS0-003 · Question #650

A security analyst discovers multiple log entries from a recently acquired tool that was bundled as a YUM package. Those entries point to attempts of privilege escalation. Which of the following Is th

The correct answer is D. The package was installed without a GPG check.. Installing a YUM package without performing a GPG signature check means its authenticity and integrity were never verified. This allows a tampered or malicious package to be installed, which can then attempt privilege escalation - matching the suspicious log entries observed by t

Submitted by rania.sa· Mar 6, 2026Security operations

Question

A security analyst discovers multiple log entries from a recently acquired tool that was bundled as a YUM package. Those entries point to attempts of privilege escalation. Which of the following Is the most likely explanation?

Options

  • AThe package was modified during installation.
  • BThe package was missing critical DLL files.
  • CThe package got corrupted while being downloaded.
  • DThe package was installed without a GPG check.

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    12% (3)
  • C
    8% (2)
  • D
    77% (20)

Explanation

Installing a YUM package without performing a GPG signature check means its authenticity and integrity were never verified. This allows a tampered or malicious package to be installed, which can then attempt privilege escalation - matching the suspicious log entries observed by the

Topics

#privilege escalation#package integrity#GPG check#vulnerability analysis

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice