CHFI - Chapter 9 (Database Forensics) Latest Already Passed

CHFI - Chapter 9 (Database Forensics) Latest Already Passed In SQL Server, how many .ndf files can there be? - 0,1 or many In SQL Server, how many .mdf files can there be? - 1 In SQL Server, how many .ldf files can there be? - 1 In SQL Server, how many components exist in a data page? - 3 (Page Header, Data Rows, Offset table) In SQL Server, what is the minimum storage unit - 8kb Name a tool to review SQL Server logs - ApexSQL Audit Which parameter will you use with sqlcmd to initiate a secure connection - -E In SQLCmd what command do you use to spool output to a file - :out Which SQLCmd command will you use to Report information about a specified database or all databases. - sp_helpdb Which SQLCmd command will you use to get info on virtual logs inside the transaction logs - dbcc loginfo What status does an active VLF SQL Server log have? - 2 Which undocumented SQL Server function(s) would a forensic investigator use to view transaction logs in text format - fn_dblog, fn_dump_dblog Which SQL Server DBCC command Returns information related to the database metadata - dbcc dbinfo Which SQL Server DBCC command Returns information related to the space occupied by the data files in the active database. - DBCC SHOWFILESTATS Which SQL Server DBCC command returns the contents of the SQL Server 'Procedure Buffer' as opposed to the buffer headers and pages from SQL Server's 'buffer cache', where SQL Server stores results. - DBCC PROCBUF vs DBCC BUFFER Where are SQL Server logs stored? - C:Program FilesMicrosoft SQL ServerMSSQL11.MSSQLSERVERMSSQLLOG. What is the first step in SQL Server forensics - Examine Windows Log