Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and…

Question

Options

• AIt is difficult to deal with the webmail as there is no offline archive in most cases. So consult your
• BLocal archives do not have evidentiary value as the email client may alter the message data
• CLocal archives should be stored together with the server storage archives in order to be
• DServer storage archives are the server information and settings stored on a local system whereas

• A
  88% (37)
• B
  7% (3)
• C
  2% (1)
• D
  2% (1)

Explanation

Local archives are copies of email data stored on a user's local machine (e.g., Outlook .pst files). The key forensic challenge with local archives and webmail is that web-based email clients (Gmail, Outlook Web, Yahoo Mail, etc.) typically do not create local archive files - emails reside entirely on the server - making it necessary to consult the service provider or administrator to obtain the data. Option B is incorrect: local archives do carry evidentiary value when properly collected and documented. Option C is incorrect: local and server archives should be kept separately and analyzed independently. Option D reverses the definitions of the two archive types.

No community discussion yet for this question.