Computer Hacking Forensic Investigator (CHFI v10) — Question 309

Joshua is analyzing an MSSQL database for finding the attack evidence and other details, where should he look for the database logs?

Answer options

• A. Model.log
• B. Model.txt
• C. Model.ldf
• D. Model.lgf

Correct answer: C

Explanation

The correct answer is C, Model.ldf, as this file is the transaction log for the database, containing records of all transactions and modifications. The other options, such as Model.log and Model.txt, do not pertain to the transaction logs of an MSSQL database, while Model.lgf is not a standard file associated with MSSQL databases.