nerdexam
CompTIA

XK0-005 · Question #817

An administrator thinks that the user Joe may be running an unauthorized process on a Linux server. Which of the following commands should the administrator run to confirm this idea?

The correct answer is B. top -u 'Joe'. The command 'top -u Joe' displays a real-time, dynamic view of all processes currently running under the user 'Joe', making it easy to identify any unauthorized processes. Option A ('lsof -p') requires a process ID (PID), not a username, so 'lsof -p Joe' is invalid. Option C…

Security

Question

An administrator thinks that the user Joe may be running an unauthorized process on a Linux server. Which of the following commands should the administrator run to confirm this idea?

Options

  • Alsof -p 'Joe'
  • Btop -u 'Joe'
  • Cjobs -n 'Joe'
  • Dps -ax 'Joe'

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    80% (32)
  • C
    5% (2)
  • D
    13% (5)

Explanation

The command 'top -u Joe' displays a real-time, dynamic view of all processes currently running under the user 'Joe', making it easy to identify any unauthorized processes. Option A ('lsof -p') requires a process ID (PID), not a username, so 'lsof -p Joe' is invalid. Option C ('jobs -n') lists background jobs of the current shell session only and does not accept a username argument. Option D ('ps -ax Joe') is incorrect syntax; ps does not accept a username as a trailing argument - the correct flag would be 'ps -u Joe' or 'ps -aux | grep Joe'.

Topics

#Linux commands#Process monitoring#top command#Security monitoring

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice