300-215 CBRFIR: Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CybersecurityDemo

Question

An engineer is reviewing a ticket for an unexpected server shutdown and determines that the web server exhausted usable memory and crashed.

Which data is required for further investigation?

A /var/log/access.log
B /var/log/messages.log
C /var/log/httpd/messages.log
D /var/log/httpd/access.log

Explanation

System message logs contain operating-system, kernel, and service events, including diagnostics associated with memory exhaustion and process termination. Web-server access logs primarily record HTTP requests and do not provide the kernel-level evidence needed to investigate an out-of-memory crash.

Learn more

Red Hat Enterprise Linux 10: Troubleshooting problems by using log files

300-215 CBRFIR: Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CybersecurityDemo

AstroTutor

Notes

Readiness

QuestionQ13

Community Discussion