Showing the five latest login records | LinuC Level 1 102 Exam original practice question

1.10.1Basic

Show only the five most recent login, logout, and reboot records from wtmp.

Which command is appropriate?

Hint 1: Focus on the requirement

Separate the scope and side effects of the concepts before comparing the choices.

Hint 2: Key terms

Review the short definitions of the command, configuration, and security concepts involved.

last: A command that displays historical login records stored in wtmp.
wtmp: The data file that stores login and logout history.
login history: Information used to review past login records in time order.
-n count: A selector that limits how many history records are displayed.
lastlog: A command that displays each user's most recent login.
current session: The state of users and terminals that are logged in now.

Detailed explanation

Incorrectwho -n 5

Incorrect. who shows current sessions, not history.

Incorrectw -n 5

Incorrect. w shows current activity.

Incorrectlastlog -n 5

Incorrect. lastlog focuses on each user's latest login rather than the latest five records overall.

Correctlast -n 5

Correct. It limits the historical output to five records.

An example you can run in a temporary verification environment.

last --help 2>&1 | grep -E -- '-n|--limit' | head -n 1

件数制限に関するhelp行

Foundation review

A mode bit controlling read, write, execute, or special execution behavior.

Attributes that determine whether a password or login account can be used.

A per-process or per-user ceiling such as open files or process count.

Question IDKL-102-1126

Environmentutil-linux last help / 履歴変更なし

Last technical review2026-08-13

More practice in this area