Question: True

Answer: Like UNIX email servers, Exchange maintains logs to track email communication.

Question: True

Answer: Information in the email header can help to track the suspect to the email’s originating location.

Question: Configuration

Answer: The files that provide helpful information to an email investigation are log files and __________ files.

Question: True

Answer: The Pagefile.sys file on a computer can contain message fragments from instant messaging applications.

Question: True

Answer: All emails have a unique ID number.

Question: False

Answer: Forensics tools can be used to trace and recover but cannot analyze email messages.

Question: True

Answer: The Enhanced Simple Mail Transfer Protocol (ESMTP) number is located in the message’s header, and is unique to each message an email server transmits.

Question: Client/Server Architecture

Answer: Email messages are distributed from a central server to many connected client computers, a configuration called __________.

Question: True

Answer: We can easily find a domain’s IP address and point of contact using the Internet.

Question: GUI

Answer: W/ many __________ email programs, you can copy an email message by dragging the message to a storage medium, such as a folder or drive.