A Security Analyst Is Investigating a Compromised Linux Server

Multiple Choice

A security analyst is investigating a compromised Linux server. The analyst issues the ps command and receives the following output: Which of the following commands should the administrator run NEXT to further analyze the compromised system?

A) strace /proc/1301
B) rpm -V openssh-server
C) /bin/ls -l /proc/1301/exe
D) kill -9 1301