nerdexam
Microsoft

70-465 · Question #85

You need to recommend a solution to meet the design requirement of logging all failed authentication requests. What should you recommend?

The correct answer is D. Login Auditing.. To log all failed authentication requests, Login Auditing is the recommended solution.

Submitted by tyler.j· Mar 5, 2026Design database security solutions

Question

You need to recommend a solution to meet the design requirement of logging all failed authentication requests. What should you recommend?

Options

  • AObject Access Auditing
  • BC2 Audit Mode
  • CLogon Triggers.
  • DLogin Auditing.

How the community answered

(24 responses)
  • B
    4% (1)
  • C
    4% (1)
  • D
    92% (22)

Why each option

To log all failed authentication requests, Login Auditing is the recommended solution.

AObject Access Auditing

Object Access Auditing tracks access to specific resources like files, folders, or registry keys, not the initial authentication attempts to a system or application itself.

BC2 Audit Mode

C2 Audit Mode is a deprecated security standard that mandates various auditing requirements, but it is not the specific modern mechanism for simply configuring the logging of failed authentication requests.

CLogon Triggers.

Logon Triggers are used to execute custom actions or code after a successful logon or before a logoff event, not for auditing or capturing failed authentication attempts.

DLogin Auditing.Correct

Login Auditing, also known as Logon Auditing in Windows or SQL Server, is specifically designed to record and log all authentication attempts, including both successful and failed requests, to security event logs for monitoring and analysis. This directly fulfills the requirement to capture all failed authentication events.

Concept tested: Configuring authentication failure logging

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-logon-policy

Topics

#Login auditing#Authentication logging#SQL Server security

Community Discussion

No community discussion yet for this question.

Full 70-465 Practice