Câu 114: CS0-002: CompTIA CySA+ Certification Exam (CS0-002)

When investigating a report of a system compromise, a security analyst views the following /var/log/secure log file: Which of the following can the analyst conclude from viewing the log file?

1. A. The comptia user knows the sudo password.
2. B. The comptia user executed the sudo su command.
3. C. The comptia user knows the root password. — đáp án hiện tại
4. D. The comptia user added himself or herself to the /etc/sudoers file.