Which shell script checks for vulnerability against various 'speculative execution' CVEs?

• A. BeRoot
• B. InSpectre
• C. Spectre & Meltdown Checker
• D. Linpostexp

Answer: (C)

The idea being tested is using a dedicated script to determine if a host is vulnerable to speculative-execution CVEs and whether mitigations are in place. The tool that fits this description best is the shell script specifically named for checking Spectre and Meltdown vulnerabilities. It’s built to run on Linux, inspect the CPU model and microcode, verify the kernel version, and report on the presence and effectiveness of mitigations such as retpolines, IBRS, STIBP, KPTI, and related patches. It covers multiple CVEs tied to speculative execution, giving you a practical, actionable status of whether the system is vulnerable or protected.

Other options don’t fit as neatly. BeRoot is a privilege-escalation tool, not a vulnerability checker. InSpectre exists as a vulnerability-checking tool but not as a single, widely adopted Linux shell script focused on these CVEs. Linpostexp isn’t a standard tool for this purpose.