312-49 · Question #226
During an investigation, an employee was found to have deleted harassing emails that were sent to someone else. The company was using Microsoft Exchange and had message tracking enabled. Where could…
The correct answer is A. C:\Program Files\Exchsrvr\servername.log. In Microsoft Exchange Server, message tracking logs are stored by default under C:\Program Files\Exchsrvr\ and are named after the server (e.g., servername.log). When message tracking is enabled on Exchange, all mail flow events-including sent, received, and deleted…
Question
During an investigation, an employee was found to have deleted harassing emails that were sent to someone else. The company was using Microsoft Exchange and had message tracking enabled. Where could the investigator search to find the message tracking log file on the Exchange server?
Options
- AC:\Program Files\Exchsrvr\servername.log
- BD:\Exchsrvr\Message Tracking\servername.log
- CC:\Exchsrvr\Message Tracking\servername.log
- DC:\Program Files\Microsoft Exchange\srvr\servername.log
How the community answered
(29 responses)- A90% (26)
- C3% (1)
- D7% (2)
Explanation
In Microsoft Exchange Server, message tracking logs are stored by default under C:\Program Files\Exchsrvr\ and are named after the server (e.g., servername.log). When message tracking is enabled on Exchange, all mail flow events-including sent, received, and deleted messages-are recorded here, making this log a critical artifact for investigating email-related incidents.
Topics
Community Discussion
No community discussion yet for this question.