NCAE Mapping Hub
Overview Scoreboard Data Roles Exercised Checklists Lessons Skill Drills Practice Terminal Progress
performance medium Apply forensics-timeline 2 points

Question 30. CSCD240-E1-C

List 10 most-recently modified files in /var/log/ (newest first).

Work the drill

Answer on paper or in a terminal before revealing the ideal answer.

Ideal answer
ls -lt /var/log | head -11
Acceptable alternatives: ["ls -lt /var/log/ | head -n 11"]

Misconception bank

Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.

ls /var/log | head -10
Misconception. Alphabetical, not time-sorted.
Remedy. -lt for time-sort.

Authority mappings

Hover any chip for the mapping justification; click to open the authority record.

DCWF roles: EN-211 Forensics Analyst
DCWF tasks: T0447
KU outcomes: CO-O5-O2
O*NET tasks: SOC 15-1212.00: task 6SOC 15-1212.00: task 7
NCAE errors: SMB Login / failure: SMB operation failed: [Errno.SSH Login / failure: Failed to connect to host: IPSMB Login / failure: SMB operation failed: [Errno.SMB Login / failure: SMB connection failed: proto.SSH Login / partial: The following users failed t.SSH Login / partial: The following users failed t.