During an Investigation, an Employee Was Found to Have Deleted

During an investigation, an employee was found to have deleted harassing emails that were sent to someone else. The company was using Microsoft Exchange and had message tracking enabled. Where could the investigator search to find the message tracking log file on the Exchange server?

A) C:\Program Files\Exchsrvr\servername.log
B) D:\Exchsrvr\Message Tracking\servername.log
C) C:\Exchsrvr\Message Tracking\servername.log
D) C:\Program Files\Microsoft Exchange\srvr\servername.log