Computer Hacking Forensic Investigator (CHFI v10) — Question 249

Which among the following files provides email header information in the Microsoft Exchange server?

Answer options

• A. gwcheck.db
• B. PRIV.EDB
• C. PUB.EDB
• D. PRIV.STM

Correct answer: B

Explanation

The correct answer is B, PRIV.EDB, as it stores the private mailbox data, including email headers. Options A, C, and D do not contain email header information; gwcheck.db is a database check utility, PUB.EDB holds public folder data, and PRIV.STM is related to streaming data for the private database.