312-50V11 · Question #728
You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which co
The correct answer is D. Grep. The question tests knowledge of command-line tools for searching text files using regular expressions. Grep is the standard Unix/Linux utility built for this purpose.
Question
You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which command-line utility are you most likely to use?
Options
- ARelational Database
- BMS Excel
- CNotepad
- DGrep
How the community answered
(57 responses)- A4% (2)
- B7% (4)
- C2% (1)
- D88% (50)
Why each option
The question tests knowledge of command-line tools for searching text files using regular expressions. Grep is the standard Unix/Linux utility built for this purpose.
A relational database requires importing log data into a structured schema first and is not a command-line utility designed for regex-based text searches.
MS Excel is a spreadsheet application that lacks native regular expression search support and is not a command-line utility.
Notepad is a basic GUI text editor with no regular expression search functionality and no command-line interface for log analysis.
Grep (Global Regular Expression Print) is a command-line utility specifically designed to search plain-text files using regular expressions, making it ideal for fast and efficient log analysis. It supports complex pattern matching, can search across multiple files simultaneously, and outputs matching lines directly in the terminal. This makes it the standard tool for firewall log analysis in security operations.
Concept tested: Using grep for regex-based log file searching
Source: https://www.gnu.org/software/grep/manual/grep.html
Topics
Community Discussion
No community discussion yet for this question.