logrotate MCQ Quiz - 25 Questions

Question 1 Not answered

What is logrotate used for in Linux?

Managing log files automatically by rotating, compressing, and deleting old logs Creating Linux users automatically Installing packages from repositories Changing firewall rules

Explanation: logrotate manages log files by rotating them, compressing old logs, deleting old logs, and creating new log files.

Question 2 Not answered

Why is logrotate important for `/var`?

It prevents log files from filling `/var` or the root filesystem It increases the size of logs It disables all services It removes the `/var` directory

Explanation: Logs are commonly stored in `/var/log`. Without rotation, they can grow and fill `/var`, causing service and system issues.

Question 3 Not answered

Which directory usually stores Linux log files?

/var/log /etc/log /home/log /usr/log

Explanation: `/var/log` is the standard directory for system and application log files.

Question 4 Not answered

What is the main logrotate configuration file?

/etc/logrotate.conf /var/logrotate.conf /usr/logrotate.conf /boot/logrotate.conf

Explanation: The main logrotate configuration file is `/etc/logrotate.conf`.

Question 5 Not answered

Where are service-specific logrotate configuration files commonly stored?

/etc/logrotate.d/ /var/logrotate/services/ /usr/logrotate.d/ /home/logrotate.d/

Explanation: Service-specific logrotate rules are commonly stored inside `/etc/logrotate.d/`.

Question 6 Not answered

What does the `daily` option mean in a logrotate config?

Rotate logs every day Delete logs every day without backup Compress logs every minute Rotate logs only when the server reboots

Explanation: `daily` tells logrotate to rotate the matching logs every day.

Question 7 Not answered

What does `rotate 7` mean?

Keep 7 old rotated log files Rotate logs every 7 minutes Delete logs larger than 7 MB Create 7 new active logs

Explanation: `rotate 7` means logrotate keeps 7 old rotated log files before deleting older ones.

Question 8 Not answered

What does the `compress` option do?

Compresses old rotated logs Compresses the active service binary Deletes all logs immediately Changes log file permissions only

Explanation: `compress` compresses older rotated logs, usually with gzip, to save disk space.

Question 9 Not answered

What does the `missingok` option mean?

Do not show an error if the log file is missing Delete missing files from the filesystem Create missing users Ignore all syntax errors

Explanation: `missingok` tells logrotate not to fail or complain if a listed log file does not exist.

Question 10 Not answered

What does the `notifempty` option mean?

Do not rotate empty log files Rotate only empty log files Delete empty directories Create empty logs every minute

Explanation: `notifempty` prevents rotation of empty log files.

Question 11 Not answered

What does `create 0640 root root` mean?

Create a new log file with permission 0640, owner root, and group root Create 640 copies of the log Create a new root user Set the log size to 640 MB

Explanation: The `create` option creates a fresh log after rotation with specified permissions, owner, and group.

Question 12 Not answered

Which command tests logrotate in debug mode without actually rotating logs?

sudo logrotate -d /etc/logrotate.conf sudo logrotate -f /etc/logrotate.conf sudo logrotate --delete /etc/logrotate.conf sudo systemctl debug logrotate

Explanation: `logrotate -d` runs in debug mode and shows what would happen without making changes.

Question 13 Not answered

Which command forces logrotate to rotate logs immediately?

sudo logrotate -f /etc/logrotate.conf sudo logrotate -d /etc/logrotate.conf sudo logrotate --dry-run /etc/logrotate.conf sudo journalctl --force-rotate

Explanation: `logrotate -f` forces rotation immediately, even if logrotate does not think rotation is due yet.

Question 14 Not answered

Where does logrotate commonly store its status file?

/var/lib/logrotate/status /etc/logrotate/status /var/log/status /home/logrotate/status

Explanation: logrotate commonly uses `/var/lib/logrotate/status` to track when logs were last rotated.

Question 15 Not answered

Which option can rotate logs when they reach a certain size?

size 100M rotate-size daily logsize enable compress 100M

Explanation: `size 100M` tells logrotate to rotate the log when it reaches 100 MB.

Question 16 Not answered

What does the `dateext` option do?

Adds a date to rotated log file names Deletes logs by date only Changes system date Disables log timestamps

Explanation: `dateext` adds a date suffix to rotated logs, making them easier to identify by date.

Question 17 Not answered

What is the purpose of `copytruncate`?

Copy the current log to a rotated file and then truncate the original Copy all logs to `/tmp` and delete originals Change ownership of logs Compress active logs without rotating

Explanation: `copytruncate` is useful when an application cannot close and reopen its log file. It keeps the original file path active.

Question 18 Not answered

What is one risk of using `copytruncate`?

A few log lines can be lost during the copy/truncate moment It always deletes the entire `/var` directory It disables SSH It prevents compression forever

Explanation: During the brief copy and truncate process, some log lines may be written and missed.

Question 19 Not answered

What is `postrotate` used for?

Running commands after log rotation Running commands before Linux boots Deleting all rotated logs immediately Disabling logrotate

Explanation: `postrotate` is used to run commands after log rotation, such as reloading a service.

Question 20 Not answered

Why might a service need to be reloaded after log rotation?

So the service closes the old log file and starts writing to the new one So the service stops permanently So all users are logged out So package cache is deleted

Explanation: Some services need reload signals after rotation so they reopen their log files correctly.

Question 21 Not answered

Which command checks whether a logrotate systemd timer exists?

systemctl list-timers | grep logrotate journalctl list-logrotate logrotate --timer-status ps -p logrotate.timer

Explanation: `systemctl list-timers | grep logrotate` checks if logrotate is scheduled through a systemd timer.

Question 22 Not answered

Which command can find log files larger than 100 MB?

sudo find /var/log -type f -size +100M -exec ls -lh {} \; sudo logrotate --find-large 100M sudo ls -R /var/log --big sudo df -h /var/log

Explanation: The `find` command searches files larger than 100 MB and lists them with details.

Question 23 Not answered

Why should you avoid blindly deleting an active log file?

The service may still write to the deleted file handle, and disk space may not free immediately It always improves performance It automatically rotates logs It creates new users

Explanation: A process can keep writing to a deleted file through an open file handle until the service is restarted or the handle is closed.

Question 24 Not answered

Which is a good long-term solution for a 5 GB application log?

Create a proper logrotate rule with compression and retention Run `sudo rm -rf /var/log` every hour Disable the application permanently Change `/var/log` permission to 777

Explanation: A proper logrotate rule controls log size, keeps a limited history, compresses old logs, and prevents repeated disk issues.

Question 25 Not answered

Which statement is correct about logrotate?

It is a production-friendly way to manage growing logs safely It is used only for creating partitions It replaces all backup tools It should only be used on Windows

Explanation: logrotate is widely used in Linux production systems to manage growing logs safely and automatically.

Result