312-49 · Question #88
All the Information about the user activity on the network, like details about login and logoff attempts, is collected in the security log of the computer. When a user's login is successful, successfu
The correct answer is A. 528. In legacy Windows systems (Windows XP, 2000, 2003), the Security Event Log uses specific numeric IDs for logon events. Event ID 528 specifically represents a successful user logon. The progression of nearby IDs covers failed scenarios: 529 = bad username/password, 530 = logon out
Question
All the Information about the user activity on the network, like details about login and logoff attempts, is collected in the security log of the computer. When a user's login is successful, successful audits generate an entry whereas unsuccessful audits generate an entry for failed login attempts in the logon event ID table. In the logon event ID table, which event ID entry (number) represents a successful logging on to a computer?
Options
- A528
- B529
- C530
- D531
How the community answered
(29 responses)- A90% (26)
- B7% (2)
- D3% (1)
Explanation
In legacy Windows systems (Windows XP, 2000, 2003), the Security Event Log uses specific numeric IDs for logon events. Event ID 528 specifically represents a successful user logon. The progression of nearby IDs covers failed scenarios: 529 = bad username/password, 530 = logon outside allowed hours, 531 = disabled account logon attempt, 532 = expired account logon attempt. Note: In Windows Vista and later, these event IDs were redesigned - successful logon became event ID 4624 - but for legacy certification exam purposes, 528 is the correct answer for successful logon.
Topics
Community Discussion
No community discussion yet for this question.