performance
medium
Apply
forensics-time
2 points
Question 36. CSCD240-E1-C
Print ISO-8601 modification time of /etc/passwd.
Work the drill
Answer on paper or in a terminal before revealing the ideal answer.
Ideal answer
stat -c %y /etc/passwd
Acceptable alternatives: ["date -r /etc/passwd --iso-8601=seconds"]
Misconception bank
Each row below is a plausible wrong answer, the thinking that produces it, and the remedy that corrects the misconception. These are the foundation of the multiple-choice framing and the targeted feedback a student receives after answering.
ls -l /etc/passwd
Misconception. Month-day format, not ISO-8601.
Remedy. stat -c %y for full ISO.
Authority mappings
Hover any chip for the mapping justification; click to open the authority record.
DCWF roles:
EN-211 Forensics Analyst
DCWF tasks:
T0447
KU outcomes:
CO-O5-O2
NCAE errors:
SMB Login / failure: SMB operation failed: [Errno.SSH Login / failure: Failed to connect to host: IPSMB Login / failure: SMB operation failed: [Errno.SMB Login / failure: SMB connection failed: proto.SSH Login / partial: The following users failed t.SSH Login / partial: The following users failed t.