
GIAC Linux Incident Responder
Domain 1Objective 2
Linux OS File System Structure GLIR Practice Questions (Page 5)
Part of the Linux Fundamentals and File System Analysis domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~25–42 in this domain), expect 6–11 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
8concepts
Questions 21–25
- 21
A Linux server's /tmp directory is filling up, causing applications to fail. You need to identify which files are consuming the most space in /tmp. Which command would you use?
Select an answer first - 22
A security policy requires that only the root user and members of the 'audit' group can read a sensitive log file. The file is currently owned by root:root with permissions 640. Which command changes the group ownership to 'audit' without altering other permissions?
Select an answer first - 23
You need to determine which filesystem type is mounted at /var and whether it is mounted read-only. Which command provides this information in a single output?
Select an answer first - 24
Which directory in the Linux file system hierarchy is the standard location for system configuration files?
Select an answer first - 25
Which command creates a symbolic link named 'link.txt' pointing to 'original.txt'?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.