Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

EC-Council 312-49 Exam - Topic 12 Question 94 Discussion

Adam, a forensic investigator, is investigating an attack on Microsoft Exchange Server of a large organization. As the first step of the investigation, he examined the PRIV.EDB file and found the source from where the mail originated and the name of the file that disappeared upon execution. Now, he wants to examine the MIME stream content. Which of the following files is he going to examine?
A) PRIV.STM
B) gwcheck.db
C) PRIV.EDB
D) PUB.EDB

EC-Council 312-49 Exam - Topic 12 Question 94 Discussion

Actual exam question for EC-Council's 312-49 exam
Question #: 94
Topic #: 12
[All 312-49 Questions]

Adam, a forensic investigator, is investigating an attack on Microsoft Exchange Server of a large organization. As the first step of the investigation, he examined the PRIV.EDB file and found the source from where the mail originated and the name of the file that disappeared upon execution. Now, he wants to examine the MIME stream content. Which of the following files is he going to examine?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Talia at May 03, 2026, 06:38 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Terina
1 day ago
Why A?
upvoted 0 times
...
Aimee
6 days ago
I think it's A) PRIV.STM.
upvoted 0 times
...
Delpha
12 days ago
Yeah, A) is the only logical option here. Good luck, everyone!
upvoted 0 times
...
Darell
17 days ago
I remember learning that MIME streams are in A) PRIV.STM.
upvoted 0 times
...
Dorsey
22 days ago
No, C) PRIV.EDB is for database, not MIME. A) is definitely correct.
upvoted 0 times
...
Isabelle
27 days ago
I feel unsure about this one. Could it be C) PRIV.EDB instead?
upvoted 0 times
...
Julieta
1 month ago
Agreed, A) PRIV.STM is the right choice. It holds the stream data.
upvoted 0 times
...
Susy
1 month ago
I think it's A) PRIV.STM. It makes sense for MIME content.
upvoted 0 times
...
Merilyn
1 month ago
Yeah, A) is the only logical option here. Good luck, everyone!
upvoted 0 times
...
Twanna
2 months ago
I remember learning that MIME streams are in A) PRIV.STM.
upvoted 0 times
...
Karina
2 months ago
No, C) PRIV.EDB is for database, not MIME. A) is definitely correct.
upvoted 0 times
...
Julian
2 months ago
I feel unsure about this one. Could it be C) PRIV.EDB instead?
upvoted 0 times
...
Angelica
2 months ago
Agreed, A) PRIV.STM is the right choice. It holds the stream data.
upvoted 0 times
...
Jennifer
2 months ago
I think it's A) PRIV.STM. It makes sense for MIME content.
upvoted 0 times
...
Keneth
2 months ago
Definitely PRIV.STM, that's where the stream data is stored.
upvoted 0 times
...
Crissy
3 months ago
Surprised it's not the PUB.EDB, thought that would be relevant!
upvoted 0 times
...
Francine
3 months ago
Wait, isn't the MIME content in the EDB files too?
upvoted 0 times
...
Wenona
3 months ago
Totally agree, that's the right file!
upvoted 0 times
...
Hyun
3 months ago
He'll check the PRIV.STM file for the MIME stream.
upvoted 0 times
...
Portia
3 months ago
I’m leaning towards A) PRIV.STM as well, but I wish I had reviewed more about the differences between these file types before the exam.
upvoted 0 times
...
Nan
5 months ago
I’m a bit confused; I thought the MIME content might be in the PRIV.EDB file too, but I guess that’s more for the database itself?
upvoted 0 times
...
Louvenia
5 months ago
I remember practicing a question like this, and I believe the answer is A) PRIV.STM since it handles the streaming content for emails.
upvoted 0 times
...
Edwin
5 months ago
I think the MIME stream content is usually found in the PRIV.STM file, but I'm not entirely sure.
upvoted 0 times
...

Save Cancel