Which components are included in a typical support bundle?

• A. /home
• B. /proc
• C. /var/log, journalctl --since, dmesg, config files
• D. /tmp

Answer: (C)

A support bundle is a diagnostic snapshot that collects the data most useful for understanding what happened on a system. The most valuable components to include are logs and configuration, so you can see events, errors, and how services are configured. In this sense, /var/log captures system and application logs; journalctl --since provides recent logs from the systemd journal; dmesg brings kernel messages that often reveal hardware or driver issues; and the configuration files reveal how services are set up and may influence behavior. Together these give a clear picture for analysis.

Choosing /home would pull in user data and large files, which isn’t necessary for diagnosing system problems and raises privacy concerns. /proc is a special virtual filesystem exposing state, but snapshotting it wholesale isn’t typically useful for a bundle. /tmp contains transient data and can be inconsistent or sensitive, and isn’t reliable for diagnosing issues. Therefore, logs, kernel messages, and configuration files form the standard set for a support bundle.