FREE Linux+ System Monitoring and Logging Questions and Answers

Question 1

A system administrator notices that systemd journal logs are being cleared after every reboot. Which of the following actions will ensure logs are stored persistently across reboots?

Accepted Answer

Create the directory /var/log/journal.

Answer

Set `Storage=volatile` in /etc/systemd/journald.conf.

Answer

Run the `journalctl --flush` command.

Answer

Restart the rsyslog service.

Question 2

A system administrator is editing a logrotate configuration file for a busy web server. Which directive should be used to ensure that rotated log files are compressed to save disk space?

Accepted Answer

`compress`

Answer

`gzip`

Answer

`archive`

Answer

`reduce`

Question 3

A Linux server is experiencing slow application performance, and the administrator suspects a disk I/O bottleneck. Which command provides detailed, real-time statistics for block devices, including transactions per second (tps) and kilobytes read/written per second?

Accepted Answer

`iostat`

Answer

`free -h`

Answer

`ps aux`

Answer

`lsof`

Question 4

An administrator needs to forward all log messages with a priority of `crit` or higher to a central log server at `10.50.1.100` using the reliable TCP protocol. Which of the following lines is correctly formatted for `/etc/rsyslog.conf`?

Accepted Answer

`*.crit @@10.50.1.100:514`

Answer

`*.crit | /dev/tcp/10.50.1.100:514`

Answer

`*.crit @10.50.1.100:514`

Answer

`mail.crit > 10.50.1.100`

Question 5

While interactively monitoring a system with the `top` command, a system administrator wants to sort the list of processes by memory consumption to identify which applications are using the most RAM. Which key should be pressed?

Accepted Answer

`M`

Answer

`P`

Answer

`k`

Answer

`u`

Question 6

A server unexpectedly rebooted overnight. To investigate the cause, an administrator needs to examine the journald logs from the boot session that occurred *before* the current one. Which command will display these specific logs?

Accepted Answer

`journalctl -b -1`

Answer

`journalctl --since "yesterday"`

Answer

`journalctl -k`

Answer

`cat /var/log/dmesg.0`