nerdexam
GIAC

GSNA · Question #44

You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to find out when a particular user was last logged in. To accomplish this, you need to analyze the…

The correct answer is C. /var/log/lastlog. In Unix, the /var/log/lastlog file is used by the finger to find when a user was last logged in. Answer: D is incorrect. In Unix, the /var/log/wtmp file stores the binary info of users that have Answer: A is incorrect. In Unix, the /var/log/btmp file is used to store…

Linux/Unix System Auditing

Question

You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to find out when a particular user was last logged in. To accomplish this, you need to analyze the log configuration files. Which of the following Unix log configuration files can you use to accomplish the task?

Options

  • A/var/log/btmp
  • B/var/log/messages
  • C/var/log/lastlog
  • D/var/log/wtmp

How the community answered

(69 responses)
  • A
    17% (12)
  • B
    7% (5)
  • C
    71% (49)
  • D
    4% (3)

Explanation

In Unix, the /var/log/lastlog file is used by the finger to find when a user was last logged in. Answer: D is incorrect. In Unix, the /var/log/wtmp file stores the binary info of users that have Answer: A is incorrect. In Unix, the /var/log/btmp file is used to store information about failed Answer: B is incorrect. In Unix, the /var/log/messages is the main system message log file.

Topics

#Unix log files#/var/log/lastlog#last login#user authentication logs

Community Discussion

No community discussion yet for this question.

Full GSNA Practice