Eccouncil Exam 312-49 Topic 1 Question 27 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 27
Topic #: 1

A Linux system is undergoing investigation. In which directory should the investigators look for its current state data if the system is in powered on state?

A/auth

B/proc

C/var/log/debug

D/var/spool/cron/

Show Suggested Answer

Suggested Answer: B

by Sheron at Jun 14, 2022, 09:16 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Martin

6 days ago

B) /proc is the answer. It's the go-to directory for accessing dynamic system information. Easy peasy!

upvoted 0 times

...

Dean

10 days ago

Hmm, /var/log/debug? I don't think that's the right place. Logs are great, but they won't give you the real-time system information you need.

upvoted 0 times

...

Bernardine

11 days ago

The /proc directory is where I'd look for the system's current state data. It's like a window into the running kernel!

upvoted 0 times

...

Hannah

21 days ago

But what about /var/log/debug? It might also have relevant data.

upvoted 0 times

...

Sylvie

25 days ago

I agree with Benedict, /proc directory contains system information.

upvoted 0 times

...

Benedict

26 days ago

I think the investigators should look in /proc directory.

upvoted 0 times

...