GIAC
GCIA · Question #2
Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he rev
Sign in or unlock GCIA to reveal the answer and full explanation for question #2. The question stem and answer options stay visible for context.
Advanced Windows Artifacts & Browser Forensics
Question
Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review to accomplish the task? Each correct answer represents a part of the solution. Choose all that apply.
Options
- ACheckpoint files
- BEDB and STM database files
- CTemporary files
- Dcookie files
Unlock GCIA to see the answer
You've previewed enough free GCIA questions. Unlock GCIA for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Exchange server#email forensics#EDB files#checkpoint files