In an email crime investigation, the forensic investigator analyses a computer using the Microsoft Outlook application. The investigator knows that Outlook stores email data in both .pst and .ost file formats. They want to focus on the files that hold the email data even when there is no internet connection. Which files should the investigator target for a deeper analysis?

A. Offline Storage Table (.ost) files located at C:Users%USERNAME%AppDataLocalMicrosoftOutlook

B. Email data located within Mozilla Thunderbird and Apple Mail email clients

C. Archived email files in .pst format located via File —> Options —> Advanced —> AutoArchive Settings

D. Personal Storage Table (.pst) files located at C:Users%USERNAME%DocumentsOutlook Files








 

Suggested Answer: A

Community Answer: A



This question is in 312-49V10 EC-Council Computer Hacking Forensic Investigator (CHFI) v10 Exam
For getting EC-Council Computer Hacking Forensic Investigator (CHFI) Certificate







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.