Question 50
Original unofficial RHEL 10 RHCSA skill-check scenario: An engineer needs lines showing either `failed` or `denied` in an authentication journal export. Which observation best confirms the intended outcome?
Explanation
Correct Answer
In this RHEL 10 system administration case: An engineer needs lines showing either `failed` or `denied` in an authentication journal export. Underlying reason: Basic and extended regular expression syntax differ for alternation. The most direct, approved resolution is: Use extended regex alternation with `grep -E 'failed|denied'` and apply case options if appropriate. Confirm it by checking: Both target event classes appear without unrelated entries. Sustain the fix by: Document filter expressions with sample inputs and expected outputs. This is the INTENDED response for the strongest objective verification result. It is a knowledge-check explanation, not a verified hands-on Red Hat exam answer;
Incorrect Answers
Blank and whitespace-only records no longer affect the count. That is not sufficient for the reported RHEL task, because basic and extended regular expression syntax differ for alternation.
Parsing succeeds and the intended setting is recognized. That is not sufficient for the reported RHEL task, because basic and extended regular expression syntax differ for alternation.
Output appears on the terminal and in the selected evidence file. That is not sufficient for the reported RHEL task, because basic and extended regular expression syntax differ for alternation.