CompTIA Security+ Question E-40

Which of the following utilities can be used in Linux to view a list of users’ failed authentication attempts?

A. badlog
B. faillog
C. wronglog
D. killlog

Answer: B

var/log/faillog – This Linux log fi le contains failed user logins. You’ll find this log useful when tracking attempts to crack into your system. /var/log/apport.log This log records application crashes. Sometimes these can reveal attempts to compromise the system or the presence of a virus or spyware.