LPI
303-200 · Question #21
Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?
The correct answer is C. auditctl -w /etc/firewall/rules -p rw -k firewall. See the full explanation below for the reasoning.
Question
Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?
Options
- Aauditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules
- Bauditctl -A -f /etc/firewall/rules -p rw -k firewall
- Cauditctl -w /etc/firewall/rules -p rw -k firewall
- Dauditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall
- Eecho "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" | auditctl ~
How the community answered
(51 responses)- A8% (4)
- B14% (7)
- C75% (38)
- D2% (1)
- E2% (1)
Community Discussion
No community discussion yet for this question.