XK0-005 · Question #626
A systems administrator is trying to track down a rogue process that has a TCP listener on a network interface for remote command-and-control instructions. Which of the following commands should the…
The correct answer is A. netstat -antp | grep LISTEN B. lsof -iTCP | grep LISTEN. The best commands to use to generate a list of rogue process names that have a TCP listener on a network interface are A. netstat -antp | grep LISTEN and B. lsof -iTCP | grep LISTEN. These commands will show the process ID (PID) and name of the processes that are listening on…
Question
A systems administrator is trying to track down a rogue process that has a TCP listener on a network interface for remote command-and-control instructions. Which of the following commands should the systems administrator use to generate a list of rogue process names? (Choose two.)
Options
- Anetstat -antp | grep LISTEN
- Blsof -iTCP | grep LISTEN
- Clsof -i:22 | grep TCP
- Dnetstat -a | grep TCP
- Enmap -p1-65535 | grep -i tcp
- Fnmap -sS 0.0.0.0/0
How the community answered
(62 responses)- A73% (45)
- C10% (6)
- D3% (2)
- E13% (8)
- F2% (1)
Explanation
The best commands to use to generate a list of rogue process names that have a TCP listener on a network interface are A. netstat -antp | grep LISTEN and B. lsof -iTCP | grep LISTEN. These commands will show the process ID (PID) and name of the processes that are listening on TCP ports, which can be used to identify any suspicious or unauthorized processes.
Topics
Community Discussion
No community discussion yet for this question.