Eccouncil Exam 312-49 Topic 1 Question 27 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 27
Topic #: 1

A Linux system is undergoing investigation. In which directory should the investigators look for its current state data if the system is in powered on state?

A/auth

B/proc

C/var/log/debug

D/var/spool/cron/

Show Suggested Answer

Suggested Answer: B

by Sheron at Jun 14, 2022, 09:16 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dean

18 hours ago

Hmm, /var/log/debug? I don't think that's the right place. Logs are great, but they won't give you the real-time system information you need.

upvoted 0 times

...

Bernardine

2 days ago

The /proc directory is where I'd look for the system's current state data. It's like a window into the running kernel!

upvoted 0 times

...

Hannah

12 days ago

But what about /var/log/debug? It might also have relevant data.

upvoted 0 times

...

Sylvie

16 days ago

I agree with Benedict, /proc directory contains system information.

upvoted 0 times

...

Benedict

17 days ago

I think the investigators should look in /proc directory.

upvoted 0 times

...