An engineer is analyzing a ticket for an unexpected server shutdown and discovers that the web- server ran out of useable memory and crashed. Which data is needed for further investigation?

The correct answer is B. /var/log/messages.log. The most relevant log for system-level events such as memory exhaustion and shutdown is /var/log/messages.log, which contains kernel and service-level logs including OOM (Out-Of- Logs located in /var/log/messages provide critical system error reporting including shutdowns…

Submitted by mateo_ar· Mar 6, 2026Forensics Techniques

Question

Options

A/var/log/access.log
B/var/log/messages.log
C/var/log/httpd/messages.log
D/var/log/httpd/access.log

How the community answered

(23 responses)

A
4% (1)
B
91% (21)
C
4% (1)

Explanation

The most relevant log for system-level events such as memory exhaustion and shutdown is /var/log/messages.log, which contains kernel and service-level logs including OOM (Out-Of- Logs located in /var/log/messages provide critical system error reporting including shutdowns, memory errors, and service failures.

Topics

#Linux logs#system logs#server crash#memory issues

Community Discussion

No community discussion yet for this question.

Full 300-215 Practice