Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-49 Exam - Topic 12 Question 94 Discussion

Adam, a forensic investigator, is investigating an attack on Microsoft Exchange Server of a large organization. As the first step of the investigation, he examined the PRIV.EDB file and found the source from where the mail originated and the name of the file that disappeared upon execution. Now, he wants to examine the MIME stream content. Which of the following files is he going to examine?
A) PRIV.STM
B) gwcheck.db
C) PRIV.EDB
D) PUB.EDB

Eccouncil 312-49 Exam - Topic 12 Question 94 Discussion

Actual exam question for Eccouncil's 312-49 exam
Question #: 94
Topic #: 12
[All 312-49 Questions]

Adam, a forensic investigator, is investigating an attack on Microsoft Exchange Server of a large organization. As the first step of the investigation, he examined the PRIV.EDB file and found the source from where the mail originated and the name of the file that disappeared upon execution. Now, he wants to examine the MIME stream content. Which of the following files is he going to examine?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Talia at May 03, 2026, 06:38 AM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Karina
4 days ago
No, C) PRIV.EDB is for database, not MIME. A) is definitely correct.
upvoted 0 times
...
Julian
9 days ago
I feel unsure about this one. Could it be C) PRIV.EDB instead?
upvoted 0 times
...
Angelica
14 days ago
Agreed, A) PRIV.STM is the right choice. It holds the stream data.
upvoted 0 times
...
Jennifer
19 days ago
I think it's A) PRIV.STM. It makes sense for MIME content.
upvoted 0 times
...
Keneth
24 days ago
Definitely PRIV.STM, that's where the stream data is stored.
upvoted 0 times
...
Crissy
29 days ago
Surprised it's not the PUB.EDB, thought that would be relevant!
upvoted 0 times
...
Francine
1 month ago
Wait, isn't the MIME content in the EDB files too?
upvoted 0 times
...
Wenona
1 month ago
Totally agree, that's the right file!
upvoted 0 times
...
Hyun
1 month ago
He'll check the PRIV.STM file for the MIME stream.
upvoted 0 times
...
Portia
2 months ago
I’m leaning towards A) PRIV.STM as well, but I wish I had reviewed more about the differences between these file types before the exam.
upvoted 0 times
...
Nan
3 months ago
I’m a bit confused; I thought the MIME content might be in the PRIV.EDB file too, but I guess that’s more for the database itself?
upvoted 0 times
...
Louvenia
3 months ago
I remember practicing a question like this, and I believe the answer is A) PRIV.STM since it handles the streaming content for emails.
upvoted 0 times
...
Edwin
4 months ago
I think the MIME stream content is usually found in the PRIV.STM file, but I'm not entirely sure.
upvoted 0 times
...

Save Cancel