1Y0-401 · Question #155
Why does using Windows Event Viewer help the company comply with its security policy?
The correct answer is A. Because it is a centralized, industry-standard log that is easily queried. Windows Event Viewer contributes to security policy compliance by providing a centralized, standardized mechanism for logging events that can be easily queried and analyzed.
Question
Options
- ABecause it is a centralized, industry-standard log that is easily queried
- BBecause it password-protects the audit logs for added security
- DBecause it collects logs from multiple devices
How the community answered
(35 responses)- A86% (30)
- B9% (3)
- D6% (2)
Why each option
Windows Event Viewer contributes to security policy compliance by providing a centralized, standardized mechanism for logging events that can be easily queried and analyzed.
Windows Event Viewer provides a centralized location for logging various system, application, and security events on a Windows machine. The events are structured and can be filtered, sorted, and queried, making it easier to monitor for security incidents and demonstrate compliance with auditing requirements.
Windows Event logs are secured by file system permissions and audit policies, not by an inherent password protection feature within the Event Viewer itself.
Windows Event Viewer primarily displays local events on a single machine; while events can be forwarded from multiple devices, the Event Viewer's core benefit for compliance on its own is the local centralization and queryability.
Concept tested: Windows Event Viewer for security compliance
Source: https://learn.microsoft.com/en-us/windows/win32/eventlog/about-event-logging
Topics
Community Discussion
No community discussion yet for this question.