This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Choose the best response for each of the questions below.
An administrator wants to track user sign-ins. Which of the following advanced audit categories should they select?
Account Logon.
Account Management.
Audit logon events.
An administrator wants to establish auditing on specific files. They've configured the folder that contains the files using the Auditing tab on the Advanced Security Settings page. However, when they review the Security log, there are no entries relating to file access in the configured folder. What does the administrator need to do?
The administrator needs to turn on Audit object access in the audit policy. They must indicate Success or Failure or both.
The administrator must define an expression-based audit policy for file and folder objects.
The administrator must use advanced auditing categories and enable Detailed Tracking.
You're configuring the Setup and Boot Event Collection feature. On which computer must you install this feature?
On the designated collector computer.
On the target computer.
On all computers.
You must answer all questions before checking your work.
Was this page helpful?