CHFI Module 9 - Database Forensics

For Forensics Analysis, the following SQL Utility Program is used to export metadata or data, or both from one or more databases

• mysqldbmeta

• mysqldbdata

• mysqldbexport

• mysqldatabase

Which of the following commands is used to find out scheduled and unscheduled tasks on the local host of Windows-based servers?

• C:/>schtasks.exe

• C:/>schtasks.msc

• C:/>sch task

• C:/>uschtasks.exe

Which of the following commands represents the 'RequestTimeUs' Apache log Fields?

• %T

• %r

• %D

• %t

Identify the command line utility that is used to take a backup of the database for any further forensic investigation.

• mysqlbackup

• mysqldump

• mysqldatabase

• mysqlblog

Database Forensics is the examination of the databases and related metadata in a forensically precise manner to make the findings presentable in a court of law.

• True

• False

SQL server data is stored natively within a SQL Server, and externally within a Windows machine hosting the server.

• True

• False

MySQL is a ________________ architecture containing subsystem and sub components that work together in order to respond to queries.

• doubled

• tiered

• layered

• single layer

The database structure varies pending on the storage engine _______ or ______ used by MySQL.

• ISAM, Inno

• MyISAM, InnoDB

• MySAM, UnnoDB

• MISAM, InnoDB

Binary logs allow a forensic examiner to trace _______ event(s) that occurred on the MySQL Server.

• some

• many

• all

• one