Which of the following Windows Event Id will help you monitors file sharing across the network?

The correct answer is C. 5140. The Windows Event ID 5140 is used to monitor file sharing across a network. This event is triggered every time a network share object is accessed, and it generates once per session when the first access attempt is made. It is part of the Audit File Share category and provides…

Security Incident Detection

Question

Options

A7045
B4625
C5140
D4624

How the community answered

(35 responses)

A
6% (2)
B
3% (1)
C
89% (31)
D
3% (1)

Explanation

The Windows Event ID 5140 is used to monitor file sharing across a network. This event is triggered every time a network share object is accessed, and it generates once per session when the first access attempt is made. It is part of the Audit File Share category and provides information about the access, including the user and device that accessed the share, the network address from which the access was made, and the name of the share that was accessed. The information about Event ID 5140 can be found in the Microsoft documentation for Windows security auditing, specifically under the Advanced security audit policies related to Audit File Share1.

Topics

#Windows Event ID#file sharing monitoring#event ID 5140#Windows logs

Community Discussion

No community discussion yet for this question.

Full 312-39 Practice