Camila, a system administrator, is tasked with investigating web traffic logs on a Windows-based server running IIS (Internet Information Services). She needs to find the location of the IIS log…

Question

Options

• A/usr/local/etc/apache22/httpd.conf
• B/etc/httpd/conf/httpd.conf
• C/etc/apache2/apache2.conf
• D%SystemDrive%\inetpub

• A
  2% (1)
• B
  12% (5)
• C
  5% (2)
• D
  81% (35)

Explanation

According to the CHFI v11 objectives under Web Application Forensics and Log Analysis, investigators must know the default log storage locations of commonly used web servers. On Windows-based systems, Internet Information Services (IIS) stores its web server logs within the inetpub directory, which resides on the system drive by default. The standard path used by IIS for logging HTTP and HTTPS requests is: %SystemDrive%\inetpub\logs\LogFiles In this question, the option %SystemDrive%\inetpub correctly points to the parent directory that contains IIS-related content, including the LogFiles directory where forensic-relevant web access logs are stored. These logs record critical details such as client IP addresses, request methods, requested URLs, HTTP status codes, timestamps, and user agents--key artifacts for reconstructing web-based attacks such as SQL injection, directory traversal, brute-force attempts, and malicious file uploads.

No community discussion yet for this question.