312-49 · Question #506
312-49 Question #506: Real Exam Question with Answer & Explanation
The correct answer is C: Logon Failure ?Account logon time restriction violation. Windows Security Event Log uses specific Event IDs to categorize logon failures. Event ID 530 specifically indicates a logon failure due to an account logon time restriction violation — the user attempted to log on outside of the hours permitted by their account policy. For ref
Question
In Windows Security Event Log, what does an event id of 530 imply?
Options
- ALogon Failure ?Unknown user name or bad password
- BLogon Failure ?User not allowed to logon at this computer
- CLogon Failure ?Account logon time restriction violation
- DLogon Failure ?Account currently disabled
Explanation
Windows Security Event Log uses specific Event IDs to categorize logon failures. Event ID 530 specifically indicates a logon failure due to an account logon time restriction violation — the user attempted to log on outside of the hours permitted by their account policy. For reference: Event ID 529 = Unknown username or bad password; Event ID 531 = Account currently disabled; Event ID 533 = User not allowed to logon at this computer. These legacy Event IDs apply to Windows 2000/XP/2003; newer Windows versions use different IDs (e.g., 4625 for general logon failure).
Topics
Community Discussion
No community discussion yet for this question.