exam questions

Exam 312-50v10 All Questions

View all questions & answers for the 312-50v10 exam

Exam 312-50v10 topic 1 question 238 discussion

Actual exam question from ECCouncil's 312-50v10
Question #: 238
Topic #: 1
[All 312-50v10 Questions]

You have successfully logged on a Linux system. You want to now cover your track. Your login attempt may be logged on several files located in /var/log. Which file does NOT belong to the list:

  • A. wtmp
  • B. user.log
  • C. btmp
  • D. auth.log
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
TrendMicroDLPSSucks
Highly Voted 8 months, 2 weeks ago
/var/log/btmp: keeps a note of all failed login attempts. /var/log/utmp: current login state by user. /var/log/wtmp: record of each login/logout. /var/log/lastlog: holds every user’s last login. A binary file you can read via lastlog command.
upvoted 9 times
...
TrendMicroDLPSSucks
Most Recent 8 months, 2 weeks ago
var/log/auth.log or /var/log/secure: Keep authentication logs for both successful or failed logins, and authentication processes. Storage depends on system type. For Debian/Ubuntu, look in /var/log/auth.log. For Redhat/CentrOS, go to /var/log/secure.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago