Question

After some unauthorized modifications to the documents hosted in an internal web server, a security analyst is searching the access logs for successful attempts to log into the secret area of the application and gather more information about the possible cause. Which of the following filters would allow the analyst to find those entries? grep "/secret/" access_log | grep " 200" grep "/secret/" access_log | grep " 403 grep "/secret/" access_log | grep " 501" TOA С В ОС, OD grep "/secret/" access_log | grep 401"

Answer 1

SInce the security analyst is looking for successful login attempts, the answer is A because code 200 stands for successful login.