While reviewing some audit logs, an analyst has identified consistent modification of the sshd

Vendor: Logical Operations
Product: CFR-210
Update on: Jul 25, 2025
Questions: 100

Logical Operations CFR-210 Question Answer

While reviewing some audit logs, an analyst has identified consistent modification of the sshd_config file for an organization’s server. The analyst would like to investigate and compare contents of the current file with archived versions of files that are saved weekly. Which of the following tools will be MOST effective during the investigation?

cat * | cut –d ‘,’ –f 2,5,7

more * | grep

diff

sort *