Computer Hacking Forensic Investigator (CHFI v10) — Question 159

In a Linux-based system, what does the command `Last -F` display?

Answer options

• A. Login and logout times and dates of the system
• B. Last run processes
• C. Last functions performed
• D. Recently opened files

Correct answer: A

Explanation

`last -F` displays the login and logout timestamps of users in a Linux system, providing details such as the exact date and time. The other options do not accurately describe the function of the command; for instance, it does not show processes, functions, or recently opened files.