MENU
Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.
Suggested Answer: A, B, C
Get Premium GCIA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
OD
Odette
11 months ago
Wait, checkpoint files? Really? That seems off.
MA
Marg
11 months ago
Totally agree with EDB and STM, but temporary files? Hmm...
CA
Callie
12 months ago
Not sure about cookie files being relevant here.
SA
Sanjuana
12 months ago
I think checkpoint files are also important.
LA
Lawanda
12 months ago
Definitely EDB and STM database files!
CE
Celestina
1 year ago
I don’t think cookie files would be useful here. They’re more about web sessions, right? I’d focus on the database files instead.
SA
Sarah
1 year ago
Temporary files might not be directly related to the email itself, but I feel like they could contain some useful information about the email's handling.
JE
Jesusa
1 year ago
I’m not entirely sure about the checkpoint files. I remember they’re important for backups, but do they help with email investigations?
GI
Gilberto
1 year ago
I think the EDB and STM database files are definitely relevant since they store email data in Exchange.
DE
Delsie
1 year ago
I've seen questions like this before. The answer is definitely B - the test automation must provide traceability. That's the most important aspect for ensuring the safety-critical system is thoroughly tested and validated.
YU
Yuonne
1 year ago
Okay, let me think this through step-by-step. The question is asking about a failed deployment, so I need to look at files that would contain information about the deployment process. The JDE.log, BuildLog.txt, and SvrPkgBuild.log files seem like the most relevant ones to review.