Free Preparation Discussions
MENU
CompTIA Exam CV0-004 Topic 1 Question 17 Discussion
Topic #: 1
The company's IDS has reported an anomaly. The cloud engineer remotely accesses the cloud instance, runs a command, and receives the following information:
Which of the following is the most likely root cause of this anomaly?
The output from the 'ps' command indicates there is a process running under the UID (User ID) of 0, which is the root user, and the command that was run is '/var/www/command.py'. Given that the normal Apache processes are running under their own UID (65535), this suggests that a command was executed with root privileges that typically should not have such high-level access. This is a strong indicator of privilege escalation, where an unauthorized user or process gains elevated access to resources that are normally protected from an application or user. Reference: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg
Antonio
3 months agoTarra
3 months agoDeonna
3 months agoDenise
2 months agoRobt
2 months agoNu
2 months agoCarline
2 months agoTawna
3 months agoGiuseppe
3 months agoElise
3 months agoSherita
3 months agoElizabeth
3 months agoMila
4 months agoJamie
4 months agoAbel
3 months agoIsidra
3 months agoDawne
3 months agoTorie
4 months agoChantay
3 months agoRosamond
3 months agoKristel
3 months agoEmerson
3 months ago