An administrator is reviewing suspicious activity on a server and needs to determine which users logged into the system within the past 24 hours. Which of the following commands should the…

The correct answer is A. last. The last command in Linux is used to display the list of all the users logged in and out since the file /var/log/wtmp was created. One or more usernames can be given as an argument to display their login in (and out) time and their host-name. The Linux "who" command lets you…

System Management

Question

An administrator is reviewing suspicious activity on a server and needs to determine which users logged into the system within the past 24 hours. Which of the following commands should the administrator run to determine this?

Options

Alast
Bwho
Cid
Dusermod

How the community answered

(40 responses)

A
90% (36)
B
5% (2)
C
3% (1)
D
3% (1)

Explanation

The last command in Linux is used to display the list of all the users logged in and out since the file /var/log/wtmp was created. One or more usernames can be given as an argument to display their login in (and out) time and their host-name. The Linux "who" command lets you display the users currently logged in to your UNIX or Linux operating system.

Topics

#Linux commands#User activity monitoring#System auditing#Security monitoring

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice