Linux+ V7 System Log Analysis Quiz

1. How would you view logs for a specific service using journalctl?

Journalctl -u service_name

Journalctl --service=service_name

Journalctl grep service_name

Journalctl -s service_name

Submit

5. A log entry shows 'EACCES' error. What does this indicate?

File not found

Permission denied

Connection timeout

Out of memory

6. Which command shows persistent journal logs across reboots?

Journalctl --boot

Journalctl --all

Journalctl -n 100

Journalctl --reverse

7. What does the grep command with -i flag do when searching logs?

Inverts the match

Performs case-insensitive search

Shows only error lines

Displays line numbers

8. Which log file records cron job execution and errors?

/var/log/cron

/var/log/messages

/var/log/syslog

/var/log/tasks

9. In rsyslog configuration, what does the asterisk (*) wildcard represent in priority?

All priorities

No priority

Only critical messages

Emergency messages only

10. What command displays the last 50 lines of a log file?

Head -50 logfile

Cat logfile | head -50

Tail -50 logfile

Tail -f logfile

11. Which file contains the main system log messages on a traditional Linux system?

/var/log/syslog

/var/log/messages

/var/log/kern.log

/var/log/audit/audit.log

12. Which syslog severity level indicates an emergency condition?

Alert

Critical

Emergency

Error

13. What is logrotate used for?

Encrypting log files

Rotating and compressing old log files

Sending logs to remote servers

Filtering sensitive information from logs

14. Which tool is used to search and filter journalctl entries by priority level?

Journalctl -p

Journalctl --grep

Journalctl --level

Journalctl -f

15. In a syslog message, what does the facility code represent?

The severity level of the message

The source or type of the message

The timestamp of the event

The hostname that generated the message

16. What is the primary purpose of the /var/log/audit/ directory?

Store email server logs

Record SELinux and system audit events

Archive web server errors

Track disk usage changes

17. Which command shows kernel log messages from the current boot?

Cat /var/log/kern.log

Dmesg

Journalctl -b

Both b and c

18. What does the rsyslog daemon do?

Manages user login sessions

Collects and routes system log messages

Monitors network connections

Schedules automated tasks

19. Which log file typically contains authentication-related events?

/var/log/auth.log

/var/log/cron

/var/log/httpd/access.log

/var/log/maillog

20. What command displays real-time system journal entries in systemd-based systems?

Tail -f /var/log/messages