performance medium Apply forensics-time 2 points

Question 35. CSCD240-E1-B

Print last-modification time of /var/log/syslog in machine-readable (seconds-epoch or ISO) format.

Work the drill

Answer on paper or in a terminal before revealing the ideal answer.

Ideal answer

stat -c %Y /var/log/syslog

Acceptable alternatives: ["date -r /var/log/syslog +%s", "stat --format=%y /var/log/syslog"]

Misconception bank

Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.

ls -l /var/log/syslog

Misconception. Month-day format, not machine-readable.

Remedy. Use stat with format specifier.

Authority mappings

Hover any chip for the mapping justification; click to open the authority record.

DCWF roles: EN-211 Forensics Analyst

DCWF tasks: T0447

KU outcomes: CO-O5-O2

O*NET tasks: SOC 15-1212.00: task 6 SOC 15-1212.00: task 7

NCAE errors: SMB Login / failure: SMB operation failed: [Errno.SSH Login / failure: Failed to connect to host: IPSMB Login / failure: SMB operation failed: [Errno.SMB Login / failure: SMB connection failed: proto.SSH Login / partial: The following users failed t.SSH Login / partial: The following users failed t.