312-49 · Question #673
An investigator enters the command sqlcmd -S WIN-CQQMK62867E -e -s"," -E as part of collecting the primary data file and logs from a database. What does the "WIN-CQQMK62867E" represent?
The correct answer is B. Name of SQL Server. In the sqlcmd utility, the -S flag specifies the name of the SQL Server instance to connect to. 'WIN-CQQMK62867E' is the hostname or computer name of the machine running the SQL Server instance. The other flags in the command are: -e (echoes input), -s"," (uses comma as the…
Question
An investigator enters the command sqlcmd -S WIN-CQQMK62867E -e -s"," -E as part of collecting the primary data file and logs from a database. What does the "WIN-CQQMK62867E" represent?
Options
- AName of the Database
- BName of SQL Server
- COperating system of the system
- DNetwork credentials of the database
How the community answered
(14 responses)- A7% (1)
- B93% (13)
Explanation
In the sqlcmd utility, the -S flag specifies the name of the SQL Server instance to connect to. 'WIN-CQQMK62867E' is the hostname or computer name of the machine running the SQL Server instance. The other flags in the command are: -e (echoes input), -s"," (uses comma as the column separator), and -E (uses a trusted/Windows authentication connection). This command is commonly used in forensic investigations to connect to and query a SQL Server database on a specific machine to extract database records and logs.
Topics
Community Discussion
No community discussion yet for this question.