Previous

Next

Knowledge check

Completed

Choose the best response for each of the questions below. Then select Check your answers.

Check your knowledge

1.

An administrator wants to track user sign-ins. Which of the following advanced audit categories should they select?

Account Logon.

Account Management.

Audit logon events.

2.

An administrator wants to establish auditing on specific files. They've configured the folder that contains the files using the Auditing tab on the Advanced Security Settings page. However, when they review the Security log, there are no entries relating to file access in the configured folder. What does the administrator need to do?

The administrator needs to turn on Audit object access in the audit policy. They must indicate Success or Failure or both.

The administrator must define an expression-based audit policy for file and folder objects.

The administrator must use advanced auditing categories and enable Detailed Tracking.

3.

An administrator is configuring Setup and Boot Event Collection. On which computer must they install the SetupAndBootEventCollection feature?

On the designated collector computer.

On the target computer.

On all computers.

You must answer all questions before checking your work.

Continue