312-49 · Question #337
When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?
The correct answer is C. Microsoft Exchange server. BlackBerry Enterprise Server (BES) acts as a middleware relay that synchronizes email between BlackBerry devices and the corporate mail server. Emails sent from a BlackBerry device pass through BES but are ultimately delivered to and stored on the Microsoft Exchange server…
Question
When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?
Options
- ARIM Messaging center
- BBlackberry Enterprise server
- CMicrosoft Exchange server
- DBlackberry desktop redirector
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- C89% (32)
- D6% (2)
Explanation
BlackBerry Enterprise Server (BES) acts as a middleware relay that synchronizes email between BlackBerry devices and the corporate mail server. Emails sent from a BlackBerry device pass through BES but are ultimately delivered to and stored on the Microsoft Exchange server, just like emails sent from any other client. Therefore, a forensic investigator searching for email evidence - including messages sent from a BlackBerry - should examine the Microsoft Exchange server, as it is the authoritative store for all corporate email.
Topics
Community Discussion
No community discussion yet for this question.