Quiz: incident response

One correct answer

In the last hour lab-app was restarted with sudo. What will sudo journalctl -t sudo -u lab-app --since -1h print?

• A The sudo and lab-app service records mixed together, by time.
• B -- No entries --.
• C The lab-app records — -u wins over -t.
• D The sudo records with commands about lab-app.