LFCS Certification LFCS Log Management and Monitoring 1

Question 1

Which journalctl option shows all log entries from the current boot?

Accepted Answer

journalctl -b

Answer

journalctl -a

Answer

journalctl --boot=all

Answer

journalctl --current

Question 2

How do you stream new journal entries in real time, similar to `tail -f`?

Accepted Answer

journalctl -f

Answer

journalctl --watch

Answer

journalctl -t

Answer

journalctl -r

Question 3

Which journalctl option filters output to only show entries from a specific systemd unit, e.g., sshd.service?

Accepted Answer

-u / --unit=

Answer

--service=

Answer

--filter=

Answer

-s

Question 4

Where does systemd-journald store persistent journal data by default?

Accepted Answer

/var/log/journal/

Answer

/var/log/syslog/

Answer

/tmp/journal/

Answer

/run/log/journal/

Question 5

Which journalctl option shows entries logged after a specified time, such as 'yesterday' or '2 hours ago'?

Accepted Answer

--since

Answer

--after

Answer

--from

Answer

--start

Question 6

Which file contains the configuration for systemd-journald, including disk usage limits?

Accepted Answer

/etc/systemd/journald.conf

Answer

/etc/journal.conf

Answer

/var/log/journal/journal.conf

Answer

/etc/rsyslog.d/journald.conf