Computer Hacking Forensic Investigator (CHFI v10) — Question 132

When investigating a computer forensics case where Microsoft Exchange and Blackberry Enterprise server are used, where would investigator need to search to find email sent from a Blackberry device?

Answer options

• A. RIM Messaging center
• B. Blackberry Enterprise server
• C. Microsoft Exchange server
• D. Blackberry desktop redirector

Correct answer: C

Explanation

The correct answer is C, Microsoft Exchange server, as it is the platform that stores emails sent from Blackberry devices when they are routed through the Enterprise server. Options A and D are not responsible for storing emails, while option B is where Blackberry data is managed but does not hold the sent emails themselves.