312-49V11 · Question #35
Henry, a forensic investigator, has been assigned to analyze a cyber-attack that occurred on a web application hosted on an Apache server running on an Ubuntu system. The attacker is suspected of…
The correct answer is D. /etc/apache2/apache2.conf. According to the CHFI v11 Web Application and Linux Forensics objectives, understanding default web server configurations and log locations is essential for investigating web-based attacks. On Ubuntu systems, the Apache web server package is typically installed as apache2, and…
Question
Henry, a forensic investigator, has been assigned to analyze a cyber-attack that occurred on a web application hosted on an Apache server running on an Ubuntu system. The attacker is suspected of exploiting vulnerabilities within the application, and Henry needs to examine the server's logs to identify any suspicious activities. As part of the investigation, Henry begins by navigating to the log file storage locations to analyze the Apache access logs and error logs. These logs are crucial for understanding the nature of the attack, identifying the source IPs, the exact times of the attack, and the type of attack executed. Henry needs to locate the configuration file for Apache on Ubuntu to find where the log files are stored. In which of the following storage locations on an Ubuntu machine can Henry find useful information regarding the log files for Apache?
Options
- A/var/log/httpd/access_log
- B/usr/local/etc/apache22/httpd.conf
- C/etc/httpd/conf/httpd.conf
- D/etc/apache2/apache2.conf
How the community answered
(36 responses)- A3% (1)
- B14% (5)
- C8% (3)
- D75% (27)
Explanation
According to the CHFI v11 Web Application and Linux Forensics objectives, understanding default web server configurations and log locations is essential for investigating web-based attacks. On Ubuntu systems, the Apache web server package is typically installed as apache2, and its primary configuration file is located at /etc/apache2/apache2.conf. This configuration file plays a central role in Apache forensics because it defines or references critical settings, including log file locations, logging formats, enabled modules, virtual host configurations, and included configuration directories (such as sites-enabled and conf-enabled). The actual access and error logs are usually stored in /var/log/apache2/access.log and /var/log/apache2/error.log, but the paths to these logs are defined or confirmed through the apache2.conf file and its included configuration files.
Topics
Community Discussion
No community discussion yet for this question.