Which of the following is a primary source of event data specifically designed for security auditing, capable of logging system calls and file access?

GIAC Linux Incident Responder

Domain 2Objective 2

Analyzing Linux Events GLIR Practice Questions (Page 8)

Part of the Event Log Analysis and Timeline Analysis domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–35 in this domain), expect 5–9 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 36–36

36foundation · easy
Which of the following is a primary source of event data specifically designed for security auditing, capable of logging system calls and file access?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GLIR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.

Analyzing Linux Events GLIR Practice Questions (Page 8)

Questions 36–36

Which of the following is a primary source of event data specifically designed for security auditing, capable of logging system calls and file access?

Keep studying — Event Log Analysis and Timeline Analysis