Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

EC-Council 312-39 Exam - Topic 7 Question 117 Discussion

Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?
B) $ tailf /var/log/kern.log
A) $ tailf /var/log/sys/kern.log
C) # tailf /var/log/messages
D) # tailf /var/log/sys/messages

EC-Council 312-39 Exam - Topic 7 Question 117 Discussion

Actual exam question for EC-Council's 312-39 exam
Question #: 117
Topic #: 7
[All 312-39 Questions]

Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?

Show Suggested Answer Hide Answer
Suggested Answer: B

In Ubuntu and Debian distributions, the command to view iptables logs is$ tailf /var/log/kern.log. This command allows you to follow the end of the kernel log file in real-time. It is useful for monitoring the logs as they are updated. Thetailfcommand is similar totail -f, and it displays the last ten lines of the file by default and then outputs appended data as the file grows.

References: The answer is verified according to the EC-Council's Certified SOC Analyst (CSA) course materials and study guides, which cover the practical aspects of security operations and incident handling, including the monitoring of systems and logs123.


by Lorean at Apr 02, 2026, 01:59 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ciara
2 months ago
I remember using C) # tailf /var/log/messages before. It might be correct.
upvoted 0 times
...
Virgina
2 months ago
I feel like B) $ tailf /var/log/kern.log could be the answer too.
upvoted 0 times
...
Richelle
3 months ago
I think it's A) $ tailf /var/log/sys/kern.log. Seems right.
upvoted 0 times
...
Thad
3 months ago
I agree with B, but A seems plausible too.
upvoted 0 times
...
Lavonna
3 months ago
Wait, are you all sure about that?
upvoted 0 times
...
Laurel
3 months ago
Definitely B, I've used it many times!
upvoted 0 times
...
Lashon
5 months ago
I thought it was A) $ tailf /var/log/sys/kern.log.
upvoted 0 times
...
Francine
5 months ago
It's B) $ tailf /var/log/kern.log for sure.
upvoted 0 times
...
Dong
6 months ago
I thought we were supposed to check kern.log for iptables, so I might go with B, but I’m not completely confident.
upvoted 0 times
...
Tanesha
6 months ago
I remember seeing something about messages in the logs, but I’m not sure if it was option C or D.
upvoted 0 times
...
Hollis
6 months ago
I practiced a similar question, and I feel like it's either A or B, but I'm leaning towards A since it mentions sys.
upvoted 0 times
...
Martin
6 months ago
I think the command to view iptables logs is related to syslog, but I can't remember if it's kern.log or messages.
upvoted 0 times
...

Save Cancel