Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam 312-49v10 All Questions

View all questions & answers for the 312-49v10 exam

Exam 312-49v10 topic 1 question 245 discussion

Actual exam question from ECCouncil's 312-49v10
Question #: 245
Topic #: 1
[All 312-49v10 Questions]

During an investigation, an employee was found to have deleted harassing emails that were sent to someone else. The company was using Microsoft Exchange and had message tracking enabled. Where could the investigator search to find the message tracking log file on the Exchange server?

  • A. C:\Program Files\Exchsrvr\servername.log
  • B. D:\Exchsrvr\Message Tracking\servername.log
  • C. C:\Exchsrvr\Message Tracking\servername.log
  • D. C:\Program Files\Microsoft Exchange\srvr\servername.log
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
aqeel1506
4 months, 1 week ago
By default, the message tracking log files exist in %ExchangeInstallPath%TransportRoles\Logs\MessageTracking. The folder contains log files with different names, following the convention MSGTRKServiceyyyyMMdd-nnnn.log. These logs record mail activity as messages flow through the transport pipeline on Mailbox servers and Edge Transport servers. To search these logs, the investigator can use the Get-MessageTrackingLog cmdlet in the Exchange Management Shell or explore the Delivery reports tab in the Exchange admin center12. So, the correct answer is C. C:\Exchsrvr\Message Tracking\servername.log.
upvoted 1 times
...
Malko59
1 year, 3 months ago
Selected Answer: A
This is a very outdated question. The sole correct answer for old 2003 Exchange server directory is: A - C:\Program Files\Exchsrvr\<ServerName>.log I can't find any information about "message tracking" in CHFI v10 book. On Microsoft Learn site I found: %ExchangeInstallPath%TransportRoles\Logs\MessageTracking. So answers B,C and D are not correct at all. That's why I propose answer A is the correct outdated answer for outdated question. https://learn.microsoft.com/en-us/exchange/mail-flow/transport-logs/message-tracking?view=exchserver-2019
upvoted 1 times
...
Malko59
1 year, 3 months ago
This is a very outdated question. The sole correct answer for old 2003 Exchange server directory is: A - C:\Program Files\Exchsrvr\<ServerName>.log I can't find any information about "message tracking" in CHFI v10 book. On Microsoft Learn site I found: %ExchangeInstallPath%TransportRoles\Logs\MessageTracking. So answers B,C and D are not correct at all. That's why I propose answer A is the correct outdated answer for outdated question. https://learn.microsoft.com/en-us/exchange/mail-flow/transport-logs/message-tracking?view=exchserver-2019
upvoted 1 times
...
Elb
1 year, 4 months ago
A: The locations of the log files are configurable, but by default, message tracking logs are stored in the Exchange server installation location; specifically: For Exchange 2003: C:\Program Files\Exchsrvr\<ServerName>.log For Exchange 2007: C:\Program Files\Microsoft\Exchange Server\TransportRoles\ Logs\MessageTracking.
upvoted 2 times
...
Manzer
1 year, 8 months ago
Selected Answer: C
C:\Exchsrvr\Message Tracking\servername.log. In Microsoft Exchange, message tracking logs are stored in the Message Tracking folder located in the Exchsrvr folder on the Exchange server. The file path for the message tracking log file is typically C:\Exchsrvr\Message Tracking\servername.log, where "servername" is the name of the Exchange server.
upvoted 2 times
...
BarryMacockener
1 year, 11 months ago
All of these answers are incorrect according to quick Google search, but if I had to guess I would say 'c' is the closest to being accurate. I suspect this question is very old and outdated.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...