nerdexam
EC-Council

312-49 · Question #680

Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and…

The correct answer is B. It is difficult to deal with the webmail as there is no offline archive in most cases. So consult your. When conducting email forensics, local archives (like Outlook .pst/.ost files) exist only for desktop email clients. Webmail services (Gmail, Yahoo, etc.) typically do not create offline/local archives on the user's machine, making them harder to acquire locally. The correct…

Submitted by rohit_dlh· Apr 18, 2026Computer Forensics in Today's World

Question

Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?

Options

  • AServer storage archives are the server information and settings stored on a local system,
  • BIt is difficult to deal with the webmail as there is no offline archive in most cases. So consult your
  • CLocal archives should be stored together with the server storage archives in order to be
  • DLocal archives do not have evidentiary value as the email client may alter the message data

How the community answered

(44 responses)
  • B
    93% (41)
  • C
    5% (2)
  • D
    2% (1)

Explanation

When conducting email forensics, local archives (like Outlook .pst/.ost files) exist only for desktop email clients. Webmail services (Gmail, Yahoo, etc.) typically do not create offline/local archives on the user's machine, making them harder to acquire locally. The correct approach in such cases is to consult the service provider or ISP for server-side copies. Option A is reversed (incorrect). Option C is wrong - local and server archives are stored separately. Option D is incorrect - local archives do hold evidentiary value.

Topics

#Email Archiving#Local Archives#Webmail#Data Accessibility

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice