nerdexam
Citrix

1Y0-401 · Question #155

Why does using Windows Event Viewer help the company comply with its security policy?

The correct answer is A. Because it is a centralized, industry-standard log that is easily queried. Windows Event Viewer contributes to security policy compliance by providing a centralized, standardized mechanism for logging events that can be easily queried and analyzed.

Design Operational Management and Security

Question

Why does using Windows Event Viewer help the company comply with its security policy?

Options

  • ABecause it is a centralized, industry-standard log that is easily queried
  • BBecause it password-protects the audit logs for added security
  • DBecause it collects logs from multiple devices

How the community answered

(35 responses)
  • A
    86% (30)
  • B
    9% (3)
  • D
    6% (2)

Why each option

Windows Event Viewer contributes to security policy compliance by providing a centralized, standardized mechanism for logging events that can be easily queried and analyzed.

ABecause it is a centralized, industry-standard log that is easily queriedCorrect

Windows Event Viewer provides a centralized location for logging various system, application, and security events on a Windows machine. The events are structured and can be filtered, sorted, and queried, making it easier to monitor for security incidents and demonstrate compliance with auditing requirements.

BBecause it password-protects the audit logs for added security

Windows Event logs are secured by file system permissions and audit policies, not by an inherent password protection feature within the Event Viewer itself.

DBecause it collects logs from multiple devices

Windows Event Viewer primarily displays local events on a single machine; while events can be forwarded from multiple devices, the Event Viewer's core benefit for compliance on its own is the local centralization and queryability.

Concept tested: Windows Event Viewer for security compliance

Source: https://learn.microsoft.com/en-us/windows/win32/eventlog/about-event-logging

Topics

#Windows Event Viewer#security compliance#centralized logging

Community Discussion

No community discussion yet for this question.

Full 1Y0-401 Practice