In which Linux log file is this output found?

Refer to the exhibit.

In which Linux log file is this output found?
A . /var/log/authorization.log
B . /var/log/dmesg
C . var/log/var.log
D . /var/log/auth.log

View Answer

Answer: D

Explanation:

The /var/log/auth.log file contains information about authentication and authorization events on a Linux system, such as successful and failed logins, sudo commands, and SSH sessions. The output in the exhibit shows a failed login attempt from a user named “root” using SSH.

Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_01101.html