Question
Which of the following will help detect changes made by an intruder to the system log of a server?

A. Mirroring of the system log on another server
B. Simultaneously duplicating the system log on a write-once disk
C. Write protecting the directory containing the system log
D. Storing the backup of the system log offsite

Answers

Answer: B

A write-once CD cannot be overwritten. Therefore, the system log duplicated on the disk could be compared to the original log to detect differences, which could be the result of changes made by an intruder. Write protecting the system log does not prevent deletion or modification, since the superuser can override the write protection. Backup and mirroring may overwrite earlier files and may not be current.   Your Comment






Search
Can you Answer!!
  • Q Describe the process steps you would perform when defragmenting a data table. This table contains mission critical data?
  • Q Explain what is interrupt latency? how can you reduce it?
  • Q Introduced in New York in 1950 what was the first credit card?
  • Q Explain the entire process of Invoice verification from GR to Invoice verification in SAP with accounting entries?
  • Q Comment on environmental effect of fuel cell.
  • Q How can you prevent more than one user from accessing the same transient data queue?
  • Q How is it possible for a company to show positive net income but go bankrupt?
  • Q Types of analog modulation are?
  • Q Where was the venue of Olympic 2014?
  • Q What is quality circle?
  • Q What do you know about Juxtra glomerular complex?