Eccouncil Exam 312-49 Topic 1 Question 27 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 27
Topic #: 1

A Linux system is undergoing investigation. In which directory should the investigators look for its current state data if the system is in powered on state?

A/auth

B/proc

C/var/log/debug

D/var/spool/cron/

Show Suggested Answer

Suggested Answer: B

by Sheron at Jun 14, 2022, 09:16 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Martina

3 months ago

The /proc directory is the obvious choice here. It's like the control room for the Linux system - all the juicy details are in there!

upvoted 0 times

Veronica

2 months ago

C: I agree, /proc is the go-to directory for investigating a Linux system's current state.

upvoted 0 times

...

Kati

2 months ago

B: Yeah, /proc is like the heart of the Linux system, it's where you can find real-time data.

upvoted 0 times

...

Carey

2 months ago

A: Definitely /proc, that's where all the system information is stored.

upvoted 0 times

...

Paulene

3 months ago

I'm tempted to choose /var/spool/cron/ just for the comedic value. Who doesn't love a good cron job investigation?

upvoted 0 times

Dong

1 months ago

No, I believe /var/log/debug would have the current state data.

upvoted 0 times

...

Germaine

2 months ago

C) /var/log/debug

upvoted 0 times

...

Dewitt

2 months ago

I think /proc is the directory we should look into.

upvoted 0 times

...

Ma

2 months ago

B) /proc

upvoted 0 times

...

Martin

3 months ago

B) /proc is the answer. It's the go-to directory for accessing dynamic system information. Easy peasy!

upvoted 0 times

Jeannetta

22 days ago

D) /var/spool/cron/ is more related to scheduled tasks, not the current state data of a powered on system.

upvoted 0 times

...

Tequila

23 days ago

C) /var/log/debug might have some useful information, but /proc is where the investigators should focus.

upvoted 0 times

...

Valentin

24 days ago

A) /auth wouldn't have the current state data. It's not the right directory for this investigation.

upvoted 0 times

...

Luis

25 days ago

B) /proc is the answer. It's the go-to directory for accessing dynamic system information. Easy peasy!

upvoted 0 times

...

Christene

26 days ago

D) /var/spool/cron/ is for cron jobs, not for current system state data. /proc is the correct directory to investigate.

upvoted 0 times

...

Chauncey

27 days ago

C) /var/log/debug might have some logs, but /proc is where the real-time system information is stored.

upvoted 0 times

...

Ressie

28 days ago

A) /auth wouldn't have the current state data. It's not the right directory to look into.

upvoted 0 times

...

Vivienne

1 months ago

B) /proc is the answer. It's the go-to directory for accessing dynamic system information. Easy peasy!

upvoted 0 times

...

Dean

3 months ago

Hmm, /var/log/debug? I don't think that's the right place. Logs are great, but they won't give you the real-time system information you need.

upvoted 0 times

Sophia

2 months ago

B: Yeah, /proc is the right directory to look for real-time system information.

upvoted 0 times

...

Iraida

2 months ago

A: B) /proc

upvoted 0 times

...

Bernardine

3 months ago

The /proc directory is where I'd look for the system's current state data. It's like a window into the running kernel!

upvoted 0 times

...

Hannah

4 months ago

But what about /var/log/debug? It might also have relevant data.

upvoted 0 times

...

Sylvie

4 months ago

I agree with Benedict, /proc directory contains system information.

upvoted 0 times

...

Benedict

4 months ago

I think the investigators should look in /proc directory.

upvoted 0 times

...