LPI Certification / CompTIA Linux+ Practice Test

Answer - A - The log file /var/log/wtmp contains information about all users who have authenticated to the Linux system, when they are either logged in or out and where they logged in from.

Key Takeaway: The /var/log/wtmp log file contains a list of all users who have authenticated to the Linux system, when they logged in, when they logged out, and where they logged in from. The format is exactly like utmp except that a null user name indicates a logout on the associated terminal. A terminal name ~ with user name shutdown or reboot indicates a system shutdown or reboot.