Linux System Administrator Exam: Last Change of User Password File

Where is the User Password Last Change File located?

Question

Which file contains the date of the last change of a user's password?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

D

The correct answer is D. /etc/shadow.

The /etc/shadow file contains the date of the last change of a user's password on a Linux system. This file stores password-related information for user accounts, including the hashed password, password expiration information, and the date of the last password change. The /etc/passwd file, on the other hand, contains basic user account information such as username, user ID, home directory, and shell.

The /etc/gshadow file is used to store group password information and is only accessible to the superuser. The /etc/pwdlog and /var/log/shadow files do not exist on most Linux systems.

In summary, if you want to know when a user last changed their password on a Linux system, you should look at the /etc/shadow file.