61.
Which of the following statements about journald is not true?
- A.journald logs kernel messages
- B.journald writes to the journal, which by default does not persist between boots.
- C.journald is a replacement of rsyslogd.
- D.To read files from the journal, the journalctl command is used.
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| journald is not a replacement of rsyslogd. It is an additional service that logs information to the journal. In RHEL 7, they are integrated to work together to provide you with the logging information you need. |
62.
Which log would you read to find messages related to authentication errors?
- A./var/log/messages
- B./var/log/lastlog
- C./var/log/audit/audit.log
- D./var/log/secure
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| Most messages are written to the /var/log/messages file, but authentication-related messages are written to /var/log/secure. |
63.
Which log would you read to find information that relates to SELinux events?
- A./var/log/messages
- B./var/log/lastlog
- C./var/log/audit/audit.log
- D./var/log/secure
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| SELinux events are logged through the audit service, which maintains its log in /var/log/audit/audit.log. |
64.
What is the name of the rsyslogd configuration file?
- A./etc/rsyslog.conf
- B./etc/sysconfig/rsyslogd.conf
- C./etc/sysconfig/rsyslog.conf
- D./etc/rsyslog.d/rsyslogd.conf
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| The rsyslogd configuration file is /etc/rsyslog.conf. |
65.
You need to change the startup behavior of the rsyslogd service. Which of the
following describes the recommended approach to do so?
- A.Include the startup parameter in the main rsyslog configuration file.
- B.Create a snap-in file in the directory /etc/rsyslog.d and specify the required parameters in there
- C.Change the systemd unit file in /usr/lib/systemd/system to include the required startup parameter.
- D.Use the SYSLOGD_OPTIONS line in the file /etc/sysconfig/rsyslog and include the startup parameter here.
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| The /etc/sysconfig/rsyslog file is the default location to change rsyslogd startup parameters. |
|
|
||||||||||||||||||||||||||||
