Eccouncil Exam 312-49 Topic 1 Question 27 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 27
Topic #: 1

A Linux system is undergoing investigation. In which directory should the investigators look for its current state data if the system is in powered on state?

A/auth

B/proc

C/var/log/debug

D/var/spool/cron/

Show Suggested Answer

Suggested Answer: B

by Sheron at Jun 14, 2022, 09:16 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Martina

1 months ago

The /proc directory is the obvious choice here. It's like the control room for the Linux system - all the juicy details are in there!

upvoted 0 times

Veronica

20 days ago

C: I agree, /proc is the go-to directory for investigating a Linux system's current state.

upvoted 0 times

...

Kati

29 days ago

B: Yeah, /proc is like the heart of the Linux system, it's where you can find real-time data.

upvoted 0 times

...

Carey

1 months ago

A: Definitely /proc, that's where all the system information is stored.

upvoted 0 times

...

Paulene

1 months ago

I'm tempted to choose /var/spool/cron/ just for the comedic value. Who doesn't love a good cron job investigation?

upvoted 0 times

Dong

7 days ago

No, I believe /var/log/debug would have the current state data.

upvoted 0 times

...

Germaine

14 days ago

C) /var/log/debug

upvoted 0 times

...

Dewitt

1 months ago

I think /proc is the directory we should look into.

upvoted 0 times

...

Ma

1 months ago

B) /proc

upvoted 0 times

...

Martin

2 months ago

B) /proc is the answer. It's the go-to directory for accessing dynamic system information. Easy peasy!

upvoted 0 times

...

Dean

2 months ago

Hmm, /var/log/debug? I don't think that's the right place. Logs are great, but they won't give you the real-time system information you need.

upvoted 0 times

Sophia

1 months ago

B: Yeah, /proc is the right directory to look for real-time system information.

upvoted 0 times

...

Iraida

1 months ago

A: B) /proc

upvoted 0 times

...

Bernardine

2 months ago

The /proc directory is where I'd look for the system's current state data. It's like a window into the running kernel!

upvoted 0 times

...

Hannah

2 months ago

But what about /var/log/debug? It might also have relevant data.

upvoted 0 times

...

Sylvie

2 months ago

I agree with Benedict, /proc directory contains system information.

upvoted 0 times

...

Benedict

2 months ago

I think the investigators should look in /proc directory.

upvoted 0 times

...