Computer Hacking Forensic Investigator (CHFI v10) — Question 544

Email archiving is a systematic approach to save and protect the data contained in emails so that it can be accessed fast at a later date. There are two main archive types, namely Local Archive and Server Storage Archive. Which of the following statements is correct while dealing with local archives?

Answer options

• A. Server storage archives are the server information and settings stored on a local system, whereas the local archives are the local email client information stored on the mail server
• B. It is difficult to deal with the webmail as there is no offline archive in most cases. So consult your counsel on the case as to the best way to approach and gain access to the required data on servers
• C. Local archives should be stored together with the server storage archives in order to be admissible in a court of law
• D. Local archives do not have evidentiary value as the email client may alter the message data

Correct answer: B

Explanation

Option B is correct because it highlights the challenges of accessing webmail archives that typically do not support offline storage. The other options misrepresent the nature of local archives or their legal standing, which is not accurate in the context of email archiving.