Joshua is analyzing an MSSQL database for finding the attack evidence and other details, where should he look for the database logs?

The correct answer is C. Model.ldf. In Microsoft SQL Server, the transaction log file uses the .ldf extension (Log Data File). Every database, including the system 'model' database, has a corresponding .ldf file that records all transactions and database modifications. Forensic investigators analyze .ldf files to…

Submitted by asante_acc· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

AModel.log
BModel.txt
CModel.ldf
DModel.lgf

How the community answered

(64 responses)

A
6% (4)
B
2% (1)
C
88% (56)
D
5% (3)

Explanation

In Microsoft SQL Server, the transaction log file uses the .ldf extension (Log Data File). Every database, including the system 'model' database, has a corresponding .ldf file that records all transactions and database modifications. Forensic investigators analyze .ldf files to identify changes made to the database, including unauthorized inserts, updates, or deletions. The .mdf extension is for primary data files. There are no standard MSSQL log formats with .txt or .lgf extensions.

Topics

#MSSQL#Database Forensics#Log Files#Transaction Logs

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice