mediumMultiple Choice
220-1102 Practice Question: A system administrator needs to find all files in…
A system administrator needs to find all files in /var/log that have been modified in the last 24 hours to check for recent activity. Which command accomplishes this?
⚠ Common exam trap
CompTIA often tests the distinction between `-mtime` (modification), `-atime` (access), and `-ctime` (inode change), and candidates frequently confuse `-ctime` with content modification or pick `-atime` thinking 'activity' includes reads.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
find /var/log -mtime -1
The `find` command with `-mtime -1` searches for files whose content (modification time) was changed within the last 24 hours. This is exactly what the administrator needs to check for recent activity in /var/log.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
find /var/log -mtime -1
Why this is correct
This correctly finds files modified within the last 24 hours using -mtime -1.
- ✗
find /var/log -atime -1
Why it's wrong here
This finds files accessed, not modified, in the last 24 hours, which is not the requirement.
- ✗
find /var/log -ctime -1
Why it's wrong here
This finds files with changed status (metadata) in the last 24 hours, not content modification.
- ✗
find /var/log -mmin -1440
Why it's wrong here
This would work but uses minutes; -mtime -1 is more standard for daily checks, and -mmin -1440 is equivalent but less common.
Go deeper
Related to this question
About these practice questions
This 220-1202 question is part of Courseiva's 687-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.