Chapter 12 E-mail Investigations

Chapter 12: E-mail Investigations MULTIPLE CHOICE 1. E-mail messages are distributed from one central server to many connected client computers, a configuration called ____. a. client/server architecture c. client architecture b. central distribution architecture d. peer-to-peer architecture PTS: 1 REF: 469 2. In an e-mail address, everything after the ____ symbol represents the domain name. a. # c. @ b. . d. PTS: 1 REF: 470 3. With many ____ e-mail programs, you can copy an e-mail message by dragging the message to a storage medium, such as a folder or disk. a. command-line c. prompt-based b. shell-based d. GUI PTS: 1 REF: 472 4. When working on a Windows environment you can press ____ to copy the selected text to the clipboard. a. Ctrl+A c. Ctrl+V b. Ctrl+C d. Ctrl+Z PTS: 1 REF: 473 5. To retrieve e-mail headers in Microsoft Outlook, right-click the e-mail message, and then click ____to open the Message Options dialog box. The Internet headers text box at the bottom of the dialog box contains the message header. a. Options c. Properties b. Details d. Message Source PTS: 1 REF: 473 6. To retrieve an Outlook Express e-mail header right-click the message, and then click ____to open a dialog box showing general information about the message. a. Properties c. Details b. Options d. Message Source PTS: 1 REF: 473 7. For older UNIX applications, such as mail or mailx, you can print the e-mail headers by using the ____ command. a. prn c. prnt b. print d. prt PTS: 1 REF: 477 8. To view AOL e-mail headers click Action, ____ from the menu. a. More options c. Options b. Message properties d. View Message Source 6 PTS: 1 REF: 478 9. To view e-mail headers on Yahoo! click the ____ link in the Mail Options window, and then click Show all headers on incoming messages. a. Advanced c. Message Properties b. General Preferences d. More information PTS: 1 REF: 480 10. In Microsoft Outlook, you can save sent, drafted, deleted, and received e-mails in a file with a file extension of ____. a. .ost c. .msg b. .eml d. .pst PTS: 1 REF: 483 11. ____ is a comprehensive Web site that has options for searching for a suspect, including by email address, phone numbers, and names. a. www.freeality.com c. www.whatis.com b. www.google.com d. www.juno.com PTS: 1 REF: 484 12. ____ allocates space for a log file on the server, and then starts overwriting from the beginning when logging reaches the end of the time frame or the specified log size. a. Continuous logging c. Circular logging b. Automatic logging d. Server logging PTS: 1 REF: 485 13. The files that provide helpful information to an e-mail investigation are log files and ____ files. a. batch c. scripts b. configuration d. .rts PTS: 1 REF: 487 14. ____ contains configuration information for Sendmail, allowing the investigator to determine where the log files reside. a. /etc/sendmail.cf c. /etc/var/log/maillog b. /etc/syslog.conf d. /var/log/maillog PTS: 1 REF: 487 15. Typically, UNIX installations are set to store logs such as maillog in the ____ directory. a. /etc/Log c. /etc/var/log b. /log d. /var/log PTS: 1 REF: 488 16. Exchange logs information about changes to its data in a(n) ____ log. a. checkpoint c. transaction b. communication d. tracking PTS: 1 REF: 489 17. In Exchange, to prevent loss of data from the last backup, a ____ file or marker is inserted in the transaction log to mark the last point at which the database was written to disk. a. tracking c. temporary b. checkpoint d. milestone PTS: 1 REF: 489 18. The Novell e-mail server software is called ____. a. Sendmail c. Sawmill b. GroupWise d. Guardian PTS: 1 REF: 491 7 19. GroupWise has ____ ways of organizing the mailboxes on the server. a. 2 c. 4 b. 3 d. 5 PTS: 1 REF: 491 20. The GroupWise logs are maintained in a standard log format in the ____ folders. a. MIME c. QuickFinder b. mbox d. GroupWise PTS: 1 REF: 491 21. Some e-mail systems store messages in flat plaintext files, known as a(n) ____ format. a. POP3 c. MIME b. mbox d. SMTP