Which of the following tools will be MOST effective during the investigation?

While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file for an organization’s server. The analyst would like to investigate and compare contents of the current file with

archived versions of files that are saved weekly.

Which of the following tools will be MOST effective during the investigation?
A . cat * | cut Cd ‘,’ Cf 2,5,7
B. more * | grep
C. diff
D. sort *

View Answer

Answer: C

Explanation:

Reference: https://www.tldp.org/LDP/abs/html/filearchiv.html