Computer Hacking Forensic Investigator (CHFI v10) — Question 321

Which command can provide the investigators with details of all the loaded modules on a Linux-based system?

Answer options

• A. list modules -a
• B. lsmod
• C. plist mod -a
• D. lsof -m

Correct answer: B

Explanation

The correct command is 'lsmod', which lists all loaded modules in the Linux kernel. The other options, such as 'list modules -a' and 'plist mod -a', are not valid commands, while 'lsof -m' is used for listing open files and their associated modules, but does not specifically list all loaded modules.