What command syntax would you use to see accounts the gateway suspects are service
accounts?
A.
pdp check_log
B. pdp show service
C.
adlog check_accounts
D.
adlog a service_accounts
What command syntax would you use to see accounts the gateway suspects are service
accounts?
What command syntax would you use to see accounts the gateway suspects are service
accounts?
A.
pdp check_log
B. pdp show service
C.
adlog check_accounts
D.
adlog a service_accounts
D)
I think the answer is not spelt correctly. I believe it should’ve been adlog a control srv_accounts show as per below:
[Expert@ATGWY:0]# adlog a control
Command: root->control
Available options:
stop – send stop command
reconf – send reconf command
muh – mark/unmark an ip as a Multi User Host
srv_accounts – adlog service accounts menu
[Expert@ATGWY:0]# adlog a control srv_account
Command: root->control->srv_accounts
Available options:
show – Show all known service accounts
find – Try to find current unknown service accounts
unmark – Remove an account name from the known service accounts
clear – Clear the suspected service accounts list
[Expert@ATGWY:0]# adlog a control srv_accounts show
Suspected service accounts (logged in more than 10 machines):
D)
[Expert@FW1]# adlog –help
adlog usage:
adlog l [options] – if you are using Identity Logging
adlog a [options] – if you are using AD Query (Identity Awareness)
Command: root
Available options:
query – adlog query menu
debug – adlog debug menu
dc – Domain Controllers status
statistics – Display statistics
control – adlog control menu
service_accounts – Try to find service accounts
Yes it´s D
D
Буду писать на родном.
В данном случае прав marlon frank, правильная команда “adlog a control srv_accounts show”.
То есть верных ответов нет, но самый близкий к реальности это ответ D.
adlog control srv_accounts
Usage adlog {a|l} control srv_accounts
https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/66477