nerdexam
EC-Council

212-89 · Question #169

Adam is an incident handler who intends to use DBCC LOG command to analyze a database and retrieve the active transaction log files for the specified database. The syntax of DBCC LOG command is DBCC…

The correct answer is A. 2. The DBCC LOG command is used in SQL Server environments to analyze the transaction log files of a database. It provides insights into the transactions that have occurred, which is crucial for forensic analysis in the event of an incident. The syntax DBCC LOG(<database_name>…

Computer Forensics in Incident Handling

Question

Adam is an incident handler who intends to use DBCC LOG command to analyze a database and retrieve the active transaction log files for the specified database. The syntax of DBCC LOG command is DBCC LOG(, ), where the output parameter specifies the level of information an incident handler wants to retrieve. If Adam wants to retrieve the full information on each operation along with the hex dump of a current transaction row, which of the following output parameters should Adam use?

Options

  • A2
  • B3
  • C4
  • D1

How the community answered

(65 responses)
  • A
    72% (47)
  • B
    9% (6)
  • C
    15% (10)
  • D
    3% (2)

Explanation

The DBCC LOG command is used in SQL Server environments to analyze the transaction log files of a database. It provides insights into the transactions that have occurred, which is crucial for forensic analysis in the event of an incident. The syntax DBCC LOG(<database_name>, <output_level>) allows an incident handler to specify the level of detail they wish to retrieve from the log files. When an incident handler like Adam requires the full information on each operation along with the hex dump of the current transaction row, the output parameter should be set to 4. This level of output is the most verbose, providing comprehensive details about each transaction, including a hex dump which is essential for a deep forensic analysis. It helps in understanding the exact changes made by transactions, which can be pivotal in investigating incidents involving data manipulation or other unauthorized database activities.

Topics

#database forensics#DBCC LOG#transaction log analysis#SQL Server forensics

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice