GAQM Exam CPEH-001 Topic 6 Question 44 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 44
Topic #: 6

John is discussing security with Jane. Jane had mentioned to John earlier that she suspects an LKM has been installed on her server. She believes this is the reason that the server has been acting erratically lately. LKM stands for Loadable Kernel Module. What does this mean in the context of Linux Security?

ALoadable Kernel Modules are a mechanism for adding functionality to a file system without requiring a kernel recompilation.

BLoadable Kernel Modules are a mechanism for adding functionality to an operating-system kernel after it has been recompiled and the system rebooted.

CLoadable Kernel Modules are a mechanism for adding auditing to an operating-system kernel without requiring a kernel recompilation.

DLoadable Kernel Modules are a mechanism for adding functionality to an operating-system kernel without requiring a kernel recompilation.

Show Suggested Answer

Suggested Answer: D

Loadable Kernel Modules, or LKM, are object files that contain code to extend the running kernel, or so-called base kernel, without the need of a kernel recompilation. Operating systems other than Linux, such as BSD systems, also provide support for LKM's. However, the Linux kernel generally makes far greater and more versatile use of LKM's than other systems. LKM's are typically used to add support for new hardware, filesystems or for adding system calls. When the functionality provided by an LKM is no longer required, it can be unloaded, freeing memory.

by Bok at May 05, 2022, 07:37 AM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!