Eric needs to review for authentication failures on a CentOS Linux – based system. Where should he find these event logs?

Rather than utilizing /var/log/auth.log, which is used by Debian and Ubuntu systems, CentOS and Red Hat store authentication log data in /var/log/secure. Understanding the variances among the primary distributions can speed up forensic and incident investigations, and consistency is one of the reasons why organizations typically opt for a single Linux distribution for their infrastructure, whenever possible.