312-49 · Question #337
312-49 Question #337: Real Exam Question with Answer & Explanation
The correct answer is C: Microsoft Exchange server. BlackBerry Enterprise Server (BES) acts as a middleware relay that synchronizes email between BlackBerry devices and the corporate mail server. Emails sent from a BlackBerry device pass through BES but are ultimately delivered to and stored on the Microsoft Exchange server, just
Question
When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?
Options
- ARIM Messaging center
- BBlackberry Enterprise server
- CMicrosoft Exchange server
- DBlackberry desktop redirector
Explanation
BlackBerry Enterprise Server (BES) acts as a middleware relay that synchronizes email between BlackBerry devices and the corporate mail server. Emails sent from a BlackBerry device pass through BES but are ultimately delivered to and stored on the Microsoft Exchange server, just like emails sent from any other client. Therefore, a forensic investigator searching for email evidence — including messages sent from a BlackBerry — should examine the Microsoft Exchange server, as it is the authoritative store for all corporate email.
Topics
Community Discussion
No community discussion yet for this question.