A Linux system administrator on a RHEL-based distribution suspects that configuration files for the vsftpd service have been illicitly modified after installation. To confirm this suspicion and check the integrity of all files associated with the vsftpd package, which of the following commands should be executed?
The correct command is rpm -V vsftpd. On RPM-based systems, the rpm -V or rpm --verify command is used to verify the integrity of an installed package. It checks various file attributes, such as size, MD5 checksum, permissions, and ownership, against the data stored in the RPM database from the original installation. The other options are incorrect. rpm -qf /etc/vsftpd/vsftpd.conf would only query which package owns that specific file, but it does not perform a verification. aide --check is a command for the Advanced Intrusion Detection Environment (AIDE) which compares the current state of the filesystem to a previously created baseline database; it does not target a specific package in this manner. rkhunter --check runs the Rootkit Hunter tool to scan for known rootkits and suspicious system changes, which is different from verifying the integrity of a specific package's installed files.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does the `rpm -V` command specifically check for?
Open an interactive chat with Bash
How is `aide --check` different from `rpm -V`?
Open an interactive chat with Bash
When should you use `rkhunter --check` instead of `rpm -V`?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access