performance medium Apply archive 2 points

Question 31. CSCD240-E1-C

Create gzipped tarball ir-evidence.tar.gz of every .log in /var/log/.

Work the drill

Answer on paper or in a terminal before revealing the ideal answer.

Ideal answer

tar -czvf ir-evidence.tar.gz /var/log/*.log

Misconception bank

Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.

tar -cvf ir-evidence.tar.gz /var/log/*.log

Misconception. Missing z; not gzipped.

Remedy. -z required for .gz.

Authority mappings

Hover any chip for the mapping justification; click to open the authority record.

DCWF roles: EN-211 Forensics Analyst

DCWF tasks: T0186

KU outcomes: CO-O5-O1

Course-artifact links

Lectures

CSCD240-S26-L08. Pipes, filters, grep, sort, uniq, wc, tar

Lab questions

CSCD240-S26-LAB5: tar -czvf backup.tar.gz *.txt. Then tar -xzvf to extract.