
GIAC Linux Incident Responder
Domain 1Objective 2
Linux OS File System Structure GLIR Practice Questions (Page 3)
Part of the Linux Fundamentals and File System Analysis domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~25–42 in this domain), expect 6–11 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
8concepts
Questions 11–15
- 11
A Linux system is running out of space in the /var filesystem. Which directory under /var is most likely to contain large, growing log files that can be safely archived or rotated?
Select an answer first - 12
During an investigation, you need to determine when a file's metadata was last changed, as opposed to its content. Which stat field provides this information?
Select an answer first - 13
A system administrator wants to create a link so that /usr/local/bin/tool points to /opt/tool/bin/tool, but the link must remain valid even if the target is moved to another filesystem. Which command should be used?
Select an answer first - 14
Which command changes the ownership of a file to user 'alice' and group 'staff'?
Select an answer first - 15
What is a key difference between a hard link and a symbolic link?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.