ISTC2071 – Computer Forensics Chapter 11 Study Guide

What name is used for the configuration typically used for e-mail messages that are
distributed from a central server to many connected client computers?

Client/server architecture

In an e-mail address, what symbol separates the domain name from the rest of the
address?

@

In what type of e-mail programs can the user copy an e-mail message by dragging
the message to a storage medium, such as a folder or drive?

GUI

What is the main information being sought when examining e-mail headers?

The originating e-mail’s domain name or an IP address

To retrieve e-mail headers in Microsoft Outlook, what option should be clicked after
the e-mail has been selected?

File, Properties

In Web-based e-mail, how are messages displayed and saved?

As web pages

In which discipline do professionals listen to voice recordings to determine who's
speaking or read e-mail and other writings known to be by a certain person and
determine whether that person wrote the e-mail or letter in question?

Forensic linguistics

To view Gmail Web e-mail headers, what should be clicked after the e-mail has
been opened and the down arrow next to the Reply circular arrow has been clicked?

Show original

To view e-mail headers on Yahoo!, what should be clicked on after "More" has been
selected?

View Raw Message

In Microsoft Outlook, what file extension is used with saved sent, drafted, deleted,
and received e-mails?

.pst

Which site can be used to verify the names of domains a message is flowing
through?

www.dkim.org

Which type of logging allocates space for a log file on the server, and then starts
overwriting from the beginning when logging reaches the end of the time frame or
the specified log size?

Circular logging

Which files provide helpful information to an e-mail investigation?

Log and configuration files

Which location contains configuration information for Sendmail?

/etc/sendmail.cf

In which directory do UNIX installations typically store logs?

/var/log

In which log does Exchange log information about changes to its data?

Transaction

In Exchange, what type of file is inserted in the transaction log to mark the last point
at which the database was written to disk in order to prevent loss of data?

Checkpoint

In Microsoft Exchange, which file is responsible for messages formatted with MAPI?

.edb

Which information from Facebook simply tells you the last time a person logged on,
the person's e-mail address and mobile number, and whether the account can be
viewed publicly?

Basic subscriber

What format is used for the flat plaintext files some e-mail systems use for message
storage?

mbox