performance
medium
Apply
archive-evidence
2 points
Question 50. CSCD240-E1-B
Create gzip-compressed tarball evidence.tar.gz of every .log in /var/log/.
Work the drill
Answer on paper or in a terminal before revealing the ideal answer.
Ideal answer
tar -czvf evidence.tar.gz /var/log/*.log
Acceptable alternatives: ["tar -czf evidence.tar.gz /var/log/*.log", "(cd /var/log && tar -czvf /tmp/evidence.tar.gz *.log)"]
Misconception bank
Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.
tar -cvf evidence.tar.gz /var/log/*.log
Misconception. Missing z; creates plain tar despite .gz extension.
Remedy. Filename ≠ compression; must use -z.
Authority mappings
Hover any chip for the mapping justification; click to open the authority record.
DCWF roles:
EN-211 Forensics Analyst
DCWF tasks:
T0186
Course-artifact links
Lectures
- CSCD240-S26-L08. Pipes, filters, grep, sort, uniq, wc, tar
Lab questions
- CSCD240-S26-LAB5: tar -czvf backup.tar.gz *.txt. Then tar -xzvf to extract.