Questions

1. If one of the devices in the network has an address of 10.114.115.55/24, which regex string would represent any address in the network?
   1. 10.114.115.55
   2. 10\.114\.115\.\d{0,3}
   3. 10\.114\.d{0.3}\.\d{0,3}
   4. 10.\D{0,3}\.D{0.3}\.\D{0,3}

The following three questions are related to the scenario and the following screenshot.

syslog in Linux (/var/log/syslog) captures information about a range of different activities. The following edited log has extracted some of the events between 22:52 and 22:59 on February 2nd:

2. An analyst suspects that a piece of malware has amended cron—the Linux task scheduler—in order to run itself. How could the analyst filter syslog for only logs related to cron?
   1. CRON
   2. cron
   3. [cron]*
   4. [CRONcron]
3. The investigator creates a separate file for CRON, by combining the cron daily, weekly, and monthly files into a file called analyseme.txt in the...