1Y0-401 · Question #163
Why does using Windows Event logs help the company comply with its security policy?
The correct answer is A. Because they are centralized, industry-standard logs that are easily queried. Windows Event logs support security policy compliance because they are a standardized, centralizable, and easily queryable source of security-relevant information.
Question
Options
- ABecause they are centralized, industry-standard logs that are easily queried
- BBecause they use password-protection for added security
- CBecause they contain detailed records of user authentication activity
- DBecause they collect data from multiple devices
How the community answered
(63 responses)- A87% (55)
- B2% (1)
- C3% (2)
- D8% (5)
Why each option
Windows Event logs support security policy compliance because they are a standardized, centralizable, and easily queryable source of security-relevant information.
Windows Event logs are an industry-standard source of security-related information across Windows environments, and their ability to be centrally collected and easily queried by various tools is vital for efficient auditing, monitoring, and incident response, which directly supports security policy compliance requirements.
Windows Event logs are protected by system permissions and service configurations, not by password-protection applied directly to individual log files.
While Windows Event logs contain detailed authentication activity, choice A describes a broader, more encompassing reason for their utility in compliance due to their standardized nature and ease of management.
Windows Event logs are generated on individual devices; they do not inherently collect data from multiple devices, which is typically a function of a log aggregation system.
Concept tested: Windows Event logs for centralized security auditing and compliance
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview
Topics
Community Discussion
No community discussion yet for this question.