GIAC Linux Incident Responder
Domain 2Objective 1
Linux OS Event Log Introduction GLIR Practice Questions (Page 7)
Part of the Event Log Analysis and Timeline Analysis domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–35 in this domain), expect 5–9 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
1concept
Questions 31–32
- 31
A Linux administrator notices that log files are growing rapidly and consuming disk space. Which tool is designed to manage log rotation and prevent disk exhaustion?
Select an answer first - 32
An incident responder needs to collect logs from a Linux system that uses auditd. Which command would show audit records for file access events?
Select an answer first
Finished these 2 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GLIR
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.