
GIAC Linux Incident Responder
Domain 1Objective 1
Linux OS Fundamentals GLIR Practice Questions (Page 5)
Part of the Linux Fundamentals and File System Analysis domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~25–42 in this domain), expect 6–11 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)
62questions here
13free pages
18concepts
Questions 21–25
- 21
An administrator wants to create a backup of a configuration file that remains valid even if the original file is moved or renamed. The backup must reference the same inode as the original. Which command should be used?
Select an answer first - 22
An incident responder needs to determine which network connections are currently established to a compromised server. The responder wants to see both listening ports and active connections, along with the associated process IDs. Which command provides this information?
Select an answer first - 23
Which command displays memory usage statistics, including used and free memory?
Select an answer first - 24
Which command is used to display and configure network interfaces on modern Linux systems?
Select an answer first - 25
Which command provides a snapshot of system performance, including CPU, memory, and I/O statistics?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.