CHFI - Chapter 9 (Database Forensics) Questions and Answers 100% Pass

CHFI - Chapter 9 (Database Forensics) Questions and Answers 100% Pass In SQL Server, how many .ndf files can there be? 0,1 or many In SQL Server, how many .mdf files can there be? 1 In SQL Server, how many .ldf files can there be? 1 In SQL Server, how many components exist in a data page? 3 (Page Header, Data Rows, Offset table) In SQL Server, what is the minimum storage unit 8kb Name a tool to review SQL Server logs ApexSQL Audit Which parameter will you use with sqlcmd to initiate a secure connection -E In SQLCmd what command do you use to spool output to a file :out Which SQLCmd command will you use to Report information about a specified database or all databases. sp_helpdb Which SQLCmd command will you use to get info on virtual logs inside the transaction logs dbcc loginfo What status does an active VLF SQL Server log have? 2 Which undocumented SQL Server function(s) would a forensic investigator use to view transaction logs in text format fn_dblog, fn_dump_dblog Which SQL Server DBCC command Returns information related to the database metadata dbcc dbinfo Which SQL Server DBCC command Returns information related to the space occupied by the data files in the active database. DBCC SHOWFILESTATS Which SQL Server DBCC command returns the contents of the SQL Server 'Procedure Buffer' as opposed to the buffer headers and pages from SQL Server's 'buffer cache', where SQL Server stores results. DBCC PROCBUF vs DBCC BUFFER Where are SQL Server logs stored? C:Program FilesMicrosoft SQL ServerMSSQL11.MSSQLSERVERMSSQLLOG. What is the first step in SQL Server forensics Examine Windows Log What is the second step in SQL Server forensics Examine ERRORLOGs What is the third step in SQL Server forensics Examine TRACE files (Log_) In step 3 of SQL Server forensics, what information should a forensic examiner note down from the trace file as part of SQL Server forensics SPID and start time In step 4 of SQL Server forensics, what is the purpose of analyzing the Active Transaction Log using dbcc log? to get Page ID In step 5 of SQL Server forensics, what artifact is examined? Data Page In step 5 of SQL Server forensics, which dbcc commands are used to examine the data page? dbcc trace and dbcc page In step 5 of SQL Server forensics, what is the purpose of examining the data page? Get Object ID In step 4 of SQL Server forensics, what is examined? Active Transaction logs In step 6 of SQL Server forensics, what is examined? SYSOBJECTS table IN a SQL Server Page header, what