Putting more focus on performance based questions

Yesterday I passed my Security+ exam with a 770 score. Not the best but it got the job done! I skipped through the first 5 PBQ’s and answered the multiple choice questions first. One of the PBQ’s was on the Linux command line with two tabs for the CRM & Web Server, It asked for you to look into two log dumps for malicious activity and then asked you to mitigate and remove the bad files. I completely skipped this question!