multiple_choice
medium
Apply
forensics-time
2 points
Question 21. CSCD240-E1-C
Which find predicate matches files modified within the last 24 hours?
Work the drill
Answer on paper or in a terminal before revealing the ideal answer.
Ideal answer
A: -mtime -1
Misconception bank
Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.
B: -mtime +1
Misconception. +1 means OLDER than 1 day.
Remedy. Sign convention: -N = within last N, +N = older than N.
C: -atime 1
Misconception. atime = access time, not modification.
Remedy. m-time vs a-time vs c-time.
D: -newer 1
Misconception. -newer takes a filename, not a number.
Remedy. -newer REFERENCE compares to REFERENCE file.
Authority mappings
Hover any chip for the mapping justification; click to open the authority record.
DCWF roles:
EN-211 Forensics Analyst
DCWF tasks:
T0447
KU outcomes:
CO-O5-O2
NCAE errors:
SMB Login / failure: SMB operation failed: [Errno.SSH Login / failure: Failed to connect to host: IPSMB Login / failure: SMB operation failed: [Errno.SMB Login / failure: SMB connection failed: proto.SSH Login / partial: The following users failed t.SSH Login / partial: The following users failed t.