Which file contains information about user accounts and passwords in Linux?

Study for the EC-Council Digital Forensics Essentials (DFE) Test. Enhance your skills with multiple choice questions, each with detailed hints and explanations. Get ready to ace your exam!

The correct answer is that both the /etc/passwd and /etc/shadow files contain important information about user accounts and passwords in Linux.

The /etc/passwd file holds essential details about user accounts, including usernames, their corresponding user IDs (UID), group IDs (GID), home directory paths, and the user's default shell. While the /etc/passwd file used to store password hashes historically, due to security concerns, modern systems have shifted to using the /etc/shadow file to enhance security practices.

The /etc/shadow file is specifically designed to hold the hashed passwords of users along with additional attributes related to password aging and expiration. This file is only accessible by privileged users, which helps to protect sensitive password information from unauthorized access.

Having both files work together, the system utilizes /etc/passwd for basic user account details while securing passwords and related policies within /etc/shadow. This separation of user account information and password data enhances overall system security.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy