CompTIA Security+ SY0-601 – Question432

A security operations technician is searching the log named /var/messages for any events that were
associated with a workstation with the IP address 10.1.1.1. Which of the following would provide this
information?


A.
cat /var/messages | grep 10.1.1.1
B. grep 10.1.1.1 | cat /var/messages
C. grep /var/messages | cat 10.1.1.1
D. cat 10.1.1.1 | grep /var/messages

Correct Answer: A