Final test: Server security

One correct answer

A package with a list of blocked addresses was upgraded, needrestart did not name the service, and it still lets the new address through. What finds who holds the old list?

• A sudo lsof +L1 — open files without a name.
• B dpkg-query -W — the version of the list package.
• C Running sudo needrestart -b again in a few minutes.