200-201 Question #38: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. In which Linux log file is this output found?

Options

• A/var/log/authorization.log
• B/var/log/dmesg
• Cvar/log/var.log
• D/var/log/auth.log

Explanation

The exhibit, displaying authentication-related messages, is found in the /var/log/auth.log file on Debian-based Linux systems.

Common mistakes.

• A. authorization.log is not a standard or commonly used log file name for authentication on most Linux distributions; auth.log is the correct standard.
• B. /var/log/dmesg contains kernel ring buffer messages, primarily related to hardware detection, device drivers, and system boot processes, not user authentication.
• C. /var/log/var.log is an incorrect path and file name; var is a directory, not a log file itself.

Concept tested. Linux System Logging (Authentication)

Reference. https://learn.microsoft.com/en-us/azure/sentinel/connect-linux-syslog

No community discussion yet for this question.