200-201 · Question #38
Refer to the exhibit. In which Linux log file is this output found?
The correct answer is D. /var/log/auth.log. The exhibit, displaying authentication-related messages, is found in the /var/log/auth.log file on Debian-based Linux systems.
Question
Refer to the exhibit. In which Linux log file is this output found?
Exhibit
Options
- A/var/log/authorization.log
- B/var/log/dmesg
- Cvar/log/var.log
- D/var/log/auth.log
How the community answered
(20 responses)- A5% (1)
- B15% (3)
- C5% (1)
- D75% (15)
Why each option
The exhibit, displaying authentication-related messages, is found in the `/var/log/auth.log` file on Debian-based Linux systems.
`authorization.log` is not a standard or commonly used log file name for authentication on most Linux distributions; `auth.log` is the correct standard.
`/var/log/dmesg` contains kernel ring buffer messages, primarily related to hardware detection, device drivers, and system boot processes, not user authentication.
`/var/log/var.log` is an incorrect path and file name; `var` is a directory, not a log file itself.
The `/var/log/auth.log` file on Debian-based Linux distributions records system authorization messages, including user logins, authentication attempts, and sudo commands, making it the primary location for security-related authentication events.
Concept tested: Linux System Logging (Authentication)
Source: https://learn.microsoft.com/en-us/azure/sentinel/connect-linux-syslog
Topics
Community Discussion
No community discussion yet for this question.
