Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Which of the following may be an indication that a system may be compromised?
Scheduled tasks that runs as admin or root
A network link running in promiscuous mode
All of these
A system log entry showing telnet starting
Each of these items MAY be an indication of a system compromise. A network link running in promiscuous mode may be an indication of an intruder installing a network sniffer on your network. A scheduled task that is running as root may indicate intruder placed tools. Telnet may be used by an intruder to issue commands to a compromised host. Even though each of these could be legitimate activity on your network, they're techniques that may be used by an intruder. The trick is to know what your network is supposed to look like, so that if these are anomalies, they stand out upon inspection.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.