nerdexam
GIAC

GCIA · Question #83

Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate the main server of SecureEnet Inc. The server runs on Debian Linux operating syst

The correct answer is A. /boot/grub/menu.lst. On Debian Linux systems using GRUB Legacy, the bootloader configuration file is /boot/grub/menu.lst, which is the Debian-specific path distinct from Red Hat-based distributions.

Network Forensics, Protocol Insecurity & Evasion Techniques

Question

Adam works as a professional Computer Hacking Forensic Investigator. A project has been assigned to him to investigate the main server of SecureEnet Inc. The server runs on Debian Linux operating system. Adam wants to investigate and review the GRUB configuration file of the server system. Which of the following files will Adam investigate to accomplish the task?

Options

  • A/boot/grub/menu.lst
  • B/grub/grub.com
  • C/boot/boot.conf
  • D/boot/grub/grub.conf

How the community answered

(64 responses)
  • A
    78% (50)
  • B
    6% (4)
  • C
    13% (8)
  • D
    3% (2)

Why each option

On Debian Linux systems using GRUB Legacy, the bootloader configuration file is /boot/grub/menu.lst, which is the Debian-specific path distinct from Red Hat-based distributions.

A/boot/grub/menu.lstCorrect

Debian and its derivatives configure GRUB Legacy through /boot/grub/menu.lst; this file contains kernel entries, boot options, and timeout settings, and is the authoritative file a forensic investigator would examine on a Debian host.

B/grub/grub.com

/grub/grub.com is not a valid path or file extension for any GRUB configuration file on any Linux distribution - the correct extension would be .cfg or the file would be named menu.lst.

C/boot/boot.conf

/boot/boot.conf does not exist as a standard GRUB configuration file on any mainstream Linux distribution.

D/boot/grub/grub.conf

/boot/grub/grub.conf is the GRUB configuration path used on Red Hat Enterprise Linux, CentOS, and Fedora systems, not on Debian-based systems.

Concept tested: GRUB Legacy configuration file path on Debian Linux

Source: https://www.gnu.org/software/grub/manual/grub/grub.html

Topics

#GRUB#Linux boot#forensic investigation#configuration files

Community Discussion

No community discussion yet for this question.

Full GCIA Practice