Computer Hacking Forensic Investigator (CHFI v10) — Question 383

Which of the following applications will allow a forensic investigator to track the user login sessions and user transactions that have occurred on an MS SQL
Server?

Answer options

• A. Event Log Explorer
• B. ApexSQL Audit
• C. Notepad++
• D. netcat

Correct answer: B

Explanation

ApexSQL Audit is specifically designed for tracking user activities and transactions within MS SQL Server, making it the correct choice. Event Log Explorer is more suited for examining system logs, while Notepad++ is a text editor and netcat is a networking utility, neither of which are appropriate for SQL Server auditing.