Free CS0-004 Web TestEngine Demo

Q7 Single choice

A security operations center (SOC) analyst investigates the results of a password spray test conducted by the vulnerability management team. The analyst must:

Identify Linux systems that have successful and unsuccessful logins with username "User1". Create an output report named "linux-events" of all the events to a flat file. The analyst issues the following console command:

ls /var/log/

The shortened output of the command is below:

Which of the following commands should the analyst use to meet the report output requirements?

A
cat /var/log/sssd | grep "User1" > linux-events.txt
B
cat /var/log/faillog.log | grep "User1" > linux-events.txt
C
cat /var/log/syslog | grep "User1" > linux-events.txt
D
cat /var/log/auth.log | grep "User1" > linux-events.txt

CS0-004 Web TestEngine demo