nerdexam
Citrix

1Y0-401 · Question #163

Why does using Windows Event logs help the company comply with its security policy?

The correct answer is A. Because they are centralized, industry-standard logs that are easily queried. Windows Event logs support security policy compliance because they are a standardized, centralizable, and easily queryable source of security-relevant information.

Design Operational Management and Security

Question

Why does using Windows Event logs help the company comply with its security policy?

Options

  • ABecause they are centralized, industry-standard logs that are easily queried
  • BBecause they use password-protection for added security
  • CBecause they contain detailed records of user authentication activity
  • DBecause they collect data from multiple devices

How the community answered

(63 responses)
  • A
    87% (55)
  • B
    2% (1)
  • C
    3% (2)
  • D
    8% (5)

Why each option

Windows Event logs support security policy compliance because they are a standardized, centralizable, and easily queryable source of security-relevant information.

ABecause they are centralized, industry-standard logs that are easily queriedCorrect

Windows Event logs are an industry-standard source of security-related information across Windows environments, and their ability to be centrally collected and easily queried by various tools is vital for efficient auditing, monitoring, and incident response, which directly supports security policy compliance requirements.

BBecause they use password-protection for added security

Windows Event logs are protected by system permissions and service configurations, not by password-protection applied directly to individual log files.

CBecause they contain detailed records of user authentication activity

While Windows Event logs contain detailed authentication activity, choice A describes a broader, more encompassing reason for their utility in compliance due to their standardized nature and ease of management.

DBecause they collect data from multiple devices

Windows Event logs are generated on individual devices; they do not inherently collect data from multiple devices, which is typically a function of a log aggregation system.

Concept tested: Windows Event logs for centralized security auditing and compliance

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview

Topics

#Windows Event logs#security compliance#centralized logging

Community Discussion

No community discussion yet for this question.

Full 1Y0-401 Practice