Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil 312-39 Exam - Topic 7 Question 117 Discussion

Actual exam question for Eccouncil's 312-39 exam
Question #: 117
Topic #: 7
[All 312-39 Questions]

Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?

Show Suggested Answer Hide Answer
Suggested Answer: B

In Ubuntu and Debian distributions, the command to view iptables logs is$ tailf /var/log/kern.log. This command allows you to follow the end of the kernel log file in real-time. It is useful for monitoring the logs as they are updated. Thetailfcommand is similar totail -f, and it displays the last ten lines of the file by default and then outputs appended data as the file grows.

References: The answer is verified according to the EC-Council's Certified SOC Analyst (CSA) course materials and study guides, which cover the practical aspects of security operations and incident handling, including the monitoring of systems and logs123.


Contribute your Thoughts:

0/2000 characters
Lashon
20 days ago
I thought it was A) $ tailf /var/log/sys/kern.log.
upvoted 0 times
...
Francine
26 days ago
It's B) $ tailf /var/log/kern.log for sure.
upvoted 0 times
...
Dong
2 months ago
I thought we were supposed to check kern.log for iptables, so I might go with B, but I’m not completely confident.
upvoted 0 times
...
Tanesha
2 months ago
I remember seeing something about messages in the logs, but I’m not sure if it was option C or D.
upvoted 0 times
...
Hollis
2 months ago
I practiced a similar question, and I feel like it's either A or B, but I'm leaning towards A since it mentions sys.
upvoted 0 times
...
Martin
2 months ago
I think the command to view iptables logs is related to syslog, but I can't remember if it's kern.log or messages.
upvoted 0 times
...

Save Cancel