Question 18

Question

A DMZ web server has been compromised. During the log review, the incident responder wants to
parse all common internal Class A addresses from the log. Which of the following commands should
the responder use to accomplish this?

Accepted Answer

grep –v”(10.[0-9]+.[0-9]+.[0-9]+)” /var/log/apache2/access.log > output.txt

Premium Access Includes

FLASH OFFER

avail 10% DISCOUNT on YOUR PURCHASE