Dropbox config.db Forensic Analysis
Which of the following files stores information about local Dropbox installation and account, email IDs linked with the account, current version/build for the local application, the host_id, and local path information?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The core concept is mapping specific forensic artifacts to their corresponding SQLite databases within a cloud application like Dropbox, with the trap being confusion between configuration and caching files.
This question tests knowledge of Dropbox SQLite database files in cloud forensics, specifically identifying which file stores account and configuration details. The correct answer is C because config.db holds the user's email, host_id, version, and local path.
Candidates often select filecache.db, assuming it stores all persistent data, but this file is primarily used for caching file metadata and content hashes, not account configuration.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The config.db file is an SQLite database located in the Dropbox cache directory that contains critical configuration information. It explicitly stores the email ID linked to the account, the current application version/build number, the unique host_id assigned to the device, and the local path where the Dropbox folder is mounted. This makes it the primary source for verifying account identity and installation context.Why the Other Options Are Wrong
host.db typically stores hardware or host-specific identifiers but does not contain the comprehensive account configuration details listed in the prompt. sigstore.db is related to signature verification and integrity checks rather than user account settings. filecache.db is designed to store cached versions of files and their metadata for performance, not static configuration or account linkage data.Community Comment Notes
Community consensus strongly supports config.db, with users noting that the name 'config' directly implies its role in storing account settings. One commenter referenced SANS material confirming that this SQLite file contains the email address and host_id. Another user validated the choice by explaining that config.db handles the local application version and path information.Exam Strategy
When analyzing cloud forensics questions, focus on the function of each database file. Configuration files usually hold account credentials and settings, while cache files hold temporary data or file versions.
Frequently Asked Questions
What other Dropbox files are relevant for forensics?
Besides config.db, filecache.db stores cached file content and metadata, which can be crucial for recovering deleted or modified documents.
Is config.db always present on the system?
Yes, if Dropbox is installed and configured, config.db will exist in the .dropbox.cache directory, containing the user's session and setup data.