nerdexam
LPI

303-200 · Question #21

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

The correct answer is C. auditctl -w /etc/firewall/rules -p rw -k firewall. See the full explanation below for the reasoning.

Question

Which of the following commands defines an audit rule that monitors read and write operations to the file/ etc/firewall/rules and associates the rule with the name firewall?

Options

  • Aauditctl -N firewall -r r: /etc/firewall/rules -r w: etc/firewall/rules
  • Bauditctl -A -f /etc/firewall/rules -p rw -k firewall
  • Cauditctl -w /etc/firewall/rules -p rw -k firewall
  • Dauditctl -_read /etc/firewall/rules -_write /etc/firewall/rules --label firewall
  • Eecho "n: firewall r:/etc/firewall/rules: w:/ etc/firewall/rules:" | auditctl ~

How the community answered

(51 responses)
  • A
    8% (4)
  • B
    14% (7)
  • C
    75% (38)
  • D
    2% (1)
  • E
    2% (1)

Community Discussion

No community discussion yet for this question.

Full 303-200 Practice