CompTIA Security+ (SY0-701) — Question 425

Which of the following techniques would attract the attention of a malicious attacker in an insider threat scenario?

Answer options

• A. Creating a false text file in /docs/salaries
• B. Setting weak passwords in /etc/shadow
• C. Scheduling vulnerable jobs in /etc/crontab
• D. Adding a fake account to /etc/passwd

Correct answer: A

Explanation

Creating a false text file in /docs/salaries is likely to raise suspicion as it indicates potential manipulation of sensitive information. The other options, while they can be concerning, do not specifically target the visible alteration of documents that could be closely monitored or audited by an organization.