Computer Hacking Forensic Investigator (CHFI v10) — Question 260

As a part of the investigation, Caroline, a forensic expert, was assigned the task to examine the transaction logs pertaining to a database named Transfers. She used SQL Server Management Studio to collect the active transaction log files of the database. Caroline wants to extract detailed information on the logs, including AllocUnitId, page id, slot id, etc. Which of the following commands does she need to execute in order to extract the desired information?

Answer options

• A. DBCC LOG(Transfers, 1)
• B. DBCC LOG(Transfers, 3)
• C. DBCC LOG(Transfers, 0)
• D. DBCC LOG(Transfers, 2)

Correct answer: D

Explanation

The correct command is DBCC LOG(Transfers, 2), which provides detailed information including AllocUnitId, page id, and slot id. The other options (0, 1, and 3) do not return the same level of detail required for a thorough analysis of the transaction logs.