A security auditor needs to determine which accounts used the su command to change to the root user. By default, which log file will provide the required information?

The correct answer is A. /var/adm/sulog. You've hit your weekly limit · resets 5am (America/New_York)

AIX 7.3 System Management

Question

Options

A/var/adm/sulog
B/var/adm/wtmp
C/var/adm/security
D/var/log/messages

How the community answered

(64 responses)

A
77% (49)
B
8% (5)
C
13% (8)
D
3% (2)

Explanation

You've hit your weekly limit · resets 5am (America/New_York)

Topics

#sulog#su command#security auditing#log files

Community Discussion

No community discussion yet for this question.

Full S2000-025 Practice