LPI Certification / CompTIA Linux+ Practice Test

Answer - D - The /var/log/faillog file contains a list of login attempts.

Key Takeaway: The faillog command formats the contents of the failure log /var/log/faillog and maintains failure counts and limits. faillog only prints out users with no successful login since the last failure. To print out a user who has had a successful login since their last failure, the user must be explicitly mentioned with the -u flag, or print out all users with the -a flag.