GIAC GCFA Exam - Topic 1 Question 65 Discussion

Actual exam question for GIAC's GCFA exam

Question #: 65
Topic #: 1

[All GCFA Questions]

You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. You are working as a root user on the Linux operating system. While performing some security investigation, you want to see the hostname and IP address from where users logged in.

Which of the following commands will you use to accomplish the task?

ADig

BNetstat

CNslookup

DLast

Show Suggested Answer

Suggested Answer: C

by Leatha at Mar 03, 2025, 04:10 PM

Limited Time Offer

25%

Off

Get Premium GCFA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Candra

3 months ago

I’m surprised "nslookup" isn’t the answer here!

upvoted 0 times

...

Dick

3 months ago

No way, "dig" is not for that!

upvoted 0 times

...

Rebbeca

3 months ago

Wait, can "netstat" show that too?

upvoted 0 times

...

Candida

4 months ago

Definitely "last", it shows user logins.

upvoted 0 times

...

Felicitas

4 months ago

I think the right command is "last".

upvoted 0 times

...

Lavonne

4 months ago

I keep mixing up "dig" and "nslookup." I don't think either of those would show user logins, though.

upvoted 0 times

...

Margret

4 months ago

I practiced a similar question, and I believe "last" is definitely the right choice for checking logins.

upvoted 0 times

...

Cordelia

4 months ago

I'm not entirely sure, but I remember "netstat" being used for network connections. Maybe it could help?

upvoted 0 times

...

Colby

5 months ago

I think the command we're looking for is "last," since it shows user login history, right?

upvoted 0 times

...

Aide

5 months ago

D seems like the right answer to me. The "last" command is designed to show login history, so that should provide the hostname and IP address details they need in this case.

upvoted 0 times

...

Felix

5 months ago

I'm a bit confused on this one. I know "netstat" is used to show network connections, but I'm not sure if that would give the specific information they're looking for. I might need to double-check the man pages for these commands.

upvoted 0 times

...

Katie

5 months ago

The question is asking for the command to see the hostname and IP address of users who have logged in, so I'm pretty sure the answer is D. The "last" command is used to show login information.

upvoted 0 times

...

Nina

5 months ago

Hmm, I'm not sure about this one. I'm trying to think through the different commands and which one would give the information we need. Let me re-read the question carefully.

upvoted 0 times

...

Willard

5 months ago

I think the answer is D. The "last" command should show the hostname and IP address of users who have logged in.

upvoted 0 times

...

German

10 months ago

I'm going with D. Last. Seems like the most straightforward way to get the login details we need.

upvoted 0 times

Chun

9 months ago

User 3: Let's go with Last then, it seems like the most straightforward option.

upvoted 0 times

...

Louvenia

9 months ago

User 2: Agreed, Last should give us the login details we need.

upvoted 0 times

...

Anthony

9 months ago

User 1: I think D) Last is the right command to use.

upvoted 0 times

...

Filiberto

10 months ago

Haha, I bet the developers who came up with these options had a field day coming up with the wrong answers. Dig and nslookup? Really?

upvoted 0 times

Hui

8 months ago

Yeah, I agree. Last command is used to display the list of last logged in users along with their IP addresses.

upvoted 0 times

...

Matthew

8 months ago

I think the correct command to see the hostname and IP address from where users logged in is D) Last.

upvoted 0 times

...

Kasandra

8 months ago

D) Last

upvoted 0 times

...

Leigha

9 months ago

C) Nslookup

upvoted 0 times

...

Nichelle

9 months ago

B) Netstat

upvoted 0 times

...

Tiara

9 months ago

A) Dig

upvoted 0 times

...

Yuette

10 months ago

Netstat could also be a good option, as it can display network connections and related information. But last might be more specific to what we're looking for.

upvoted 0 times

...