CFR-210 Latest Exam Braindumps
Question 1: A DMZ web server has been compromised. During the log review, the incident responder wantsto parse all common internal Class A addresses from the log.
Which of the following commands should the responder use to accomplish this?
A. grep -x"(10.[0-9]+.[0-9]+.[0-9]+)" etc/rc.d/apache2/access.log I output.txt
B. grep -x"(192.168.[0.9]+[0-9])" bin/apache2/access.log I output.txt
C. grep -v"(10.[0-9]+.[0-9]+.[0-9]+)" /var/log/apache2/access.log > output.txt
D. grep -v"(192.168.[0.9]+[0-9]+)" /var/log/apache2/access.log > output.txt
Correct Answer: C
