312-49v11 practice question 11 of 25

Henry, a forensic investigator, has been assigned to analyze a cyber-attack that occurred on a web application hosted on an Apache server running on…

Henry, a forensic investigator, has been assigned to analyze a cyber-attack that occurred on a web application hosted on an Apache server running on an Ubuntu system. The attacker is suspected of exploiting vulnerabilities within the application, and Henry needs to examine the server's logs to identify any suspicious activities. As part of the investigation, Henry begins by navigating to the log file storage locations to analyze the Apache access logs and error logs. These logs are crucial for understanding the nature of the attack, identifying the source IPs, the exact times of the attack, and the type of attack executed. Henry needs to locate the configuration file for Apache on Ubuntu to find where the log files are stored. In which of the following storage locations on an Ubuntu machine can Henry find useful information regarding the log files for Apache?

Answer options

A: /var/log/httpd/access_log

B: /usr/local/etc/apache22/httpd.conf

C: /etc/httpd/conf/httpd.conf

D: /etc/apache2/apache2.conf Correct answer

Correct Answer:

D. /etc/apache2/apache2.conf

Explanation

On Debian-based Linux distributions, including Ubuntu, the main configuration file for the Apache2 web server is located at /etc/apache2/apache2.conf. This file contains global settings and includes other configuration files from subdirectories like sites-enabled/ and mods-enabled/. An investigator would examine this file and the included virtual host configurations to determine the precise location of the ErrorLog and CustomLog (access log) directives, which are typically stored by default in the /var/log/apache2/ directory.

Why Incorrect

A. /var/log/httpd/accesslog is a log file path, not a configuration file, and httpd is the service name used on Red Hat-based systems.
B. /usr/local/etc/apache22/httpd.conf suggests a non-standard, manually compiled installation of Apache, not the default for an Ubuntu package installation.
C. /etc/httpd/conf/httpd.conf is the standard path for the Apache configuration file on Red Hat-based systems like CentOS or RHEL, not Ubuntu.

References

1. Ubuntu. (n.d.). Apache HTTP Server. Ubuntu Server Guide. The documentation for setting up Apache on Ubuntu specifies the /etc/apache2/ directory structure. (Retrieved from official Ubuntu documentation websites).

2. The Apache Software Foundation. (n.d.). Log Files. Apache HTTP Server Version 2.4 Documentation. The documentation notes that file locations are determined at compile-time but /etc/apache2/ is the convention for Debian/Ubuntu packages.

Keep practicing

Take the free 312-49v11 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test