70-465 · Question #85
You need to recommend a solution to meet the design requirement of logging all failed authentication requests. What should you recommend?
The correct answer is D. Login Auditing.. To log all failed authentication requests, Login Auditing is the recommended solution.
Question
Options
- AObject Access Auditing
- BC2 Audit Mode
- CLogon Triggers.
- DLogin Auditing.
How the community answered
(24 responses)- B4% (1)
- C4% (1)
- D92% (22)
Why each option
To log all failed authentication requests, Login Auditing is the recommended solution.
Object Access Auditing tracks access to specific resources like files, folders, or registry keys, not the initial authentication attempts to a system or application itself.
C2 Audit Mode is a deprecated security standard that mandates various auditing requirements, but it is not the specific modern mechanism for simply configuring the logging of failed authentication requests.
Logon Triggers are used to execute custom actions or code after a successful logon or before a logoff event, not for auditing or capturing failed authentication attempts.
Login Auditing, also known as Logon Auditing in Windows or SQL Server, is specifically designed to record and log all authentication attempts, including both successful and failed requests, to security event logs for monitoring and analysis. This directly fulfills the requirement to capture all failed authentication events.
Concept tested: Configuring authentication failure logging
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-logon-policy
Topics
Community Discussion
No community discussion yet for this question.