Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?

• A.Local archives should be stored together with the server storage archives in order to be admissible in a court of law
• B.Local archives do not have evidentiary value as the email client may alter the message data
• C.Server storage archives are the server information and settings stored on a local system, whereas the local archives are the local email client information stored on the mail server
• D.It is difficult to deal with the webmail as there is no offline archive in most cases. So consult your counsel on the case as to the best way to approach and gain access to the required data on servers

Comment: *

Name: *

Email: *

Verification: *

An investigator wants to extract passwords from SAM and System Files. Which tool can the Investigator use to obtain a list of users, passwords, and their hashes In this case?

• A.HashKey
• B.PWdump7
• C.FileMerlin
• D.Nuix

Comment: *

Name: *

Email: *

Verification: *

What is the size value of a nibble?

• A.0.5 bit
• B.0.5 kilo byte
• C.2 bits
• D.0.5 byte

Comment: *

Name: *

Email: *

Verification: *

Which of the following file contains the traces of the applications installed, run, or uninstalled from a system?

• A.Image Files
• B.Shortcut Files
• C.Prefetch Files
• D.Virtual files

Comment: *

Name: *

Email: *

Verification: *

What method of computer forensics will allow you to trace all ever-established user accounts on a Windows 2000 sever the course of its lifetime?

• A.comparison of MD5 checksums
• B.analysis of volatile data
• C.review of SIDs in the Registry
• D.forensic duplication of hard drive

Comment: *

Name: *

Email: *

Verification: *