Question

question 13
the linux log file that can reveal attempts to compromise the system or the presence of a virus or spyware is ______.
a /var/log/kern.log
b /var/log/apache2/*
c /var/log/lighttpd/*
d /var/log/apport.log
10 points

Explanation:

To determine the correct Linux log file for system compromise attempts or malware presence:

• Option A: /var/log/kern.log logs kernel - related events, including system - level issues and potential security - related kernel - level activities like unauthorized access attempts or malware - induced kernel anomalies.
• Option B: /var/log/apache2/* is for Apache web server logs, mainly related to web - server - specific activities, not system - wide compromise or malware detection.
• Option C: /var/log/lighttpd/* is for Lighttpd web server logs, focused on web - server operations, not system security threats.
• Option D: /var/log/apport.log is for application crash reports, not for system compromise or malware detection.

Answer:

A. /var/log/kern.log