Certified SOC Analyst (CSA) — Question 69

Chloe, a SOC analyst with Jake Tech, is checking Linux systems logs. She is investigating files at /var/log/wtmp.
What Chloe is looking at?

Answer options

• A. Error log
• B. System boot log
• C. General message and system-related stuff
• D. Login records

Correct answer: D

Explanation

Chloe is examining the /var/log/wtmp file, which specifically contains records of user logins and logouts on the system, making option D the correct answer. Options A, B, and C do not accurately represent the contents of the /var/log/wtmp file, as they refer to different types of logs that do not track user login activities.