GCFA · Question #100
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate the main server of SecureEnet Inc. The server runs on Debian Linux operating syst
The correct answer is A. /boot/grub/menu.lst. On Debian Linux using GRUB Legacy, the bootloader configuration file is located at /boot/grub/menu.lst, which is the Debian-specific default path.
Question
Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate the main server of SecureEnet Inc. The server runs on Debian Linux operating system. Adam wants to investigate and review the GRUB configuration file of the server system. Which of the following files will Adam investigate to accomplish the task?
Options
- A/boot/grub/menu.lst
- B/boot/grub/grub.conf
- C/boot/boot.conf
- D/grub/grub.com
How the community answered
(20 responses)- A85% (17)
- B10% (2)
- D5% (1)
Why each option
On Debian Linux using GRUB Legacy, the bootloader configuration file is located at /boot/grub/menu.lst, which is the Debian-specific default path.
Debian and Debian-based distributions using GRUB Legacy (GRUB 1) store the bootloader configuration in /boot/grub/menu.lst. This file defines kernel entries, boot options, and default boot targets. A forensic investigator examining a Debian server's boot configuration would examine this specific file.
/boot/grub/grub.conf is the GRUB Legacy configuration file path used on Red Hat Enterprise Linux and CentOS systems, not Debian.
/boot/boot.conf is not a valid or standard GRUB configuration file path on any major Linux distribution.
/grub/grub.com is not a valid Linux filesystem path - it uses an incorrect directory structure and a .com extension which has no meaning for Linux config files.
Concept tested: GRUB Legacy configuration file location on Debian Linux
Source: https://www.gnu.org/software/grub/manual/legacy/grub.html
Topics
Community Discussion
No community discussion yet for this question.