70-648 · Question #83
You have a client computer named Computer1 that runs Windows 7. On Computer1, you configure a source-initiated subscription. You configure the subscription to retrieve all events from the Windows…
The correct answer is B. Add the Network Service security principal to the Event Log Readers group on the domain. You have to prepare your Windows Server 2008/2008 R2 machines for collection of security events. To do this, simply add the Network Service account to the Built-in Event Log Readers forwarding-and-you.aspx The computer account does not need permissions to Event Log Readers. We…
Question
You have a client computer named Computer1 that runs Windows 7. On Computer1, you configure a source-initiated subscription. You configure the subscription to retrieve all events from the Windows logs of a domain controller named DC1. The subscription is configured to use the HTTP protocol. You discover that events from the Security log of DC1 are not collected on Computer1. Events from the Application log of DC1 and the System log of DC1 are collected on Computer1. You need to ensure that events from the Security log of DC1 are collected on Computer1. What should you do?
Options
- AAdd the computer account of Computer1 to the Event Log Readers group on the domain controller.
- BAdd the Network Service security principal to the Event Log Readers group on the domain.
- CConfigure the subscription to use custom Event Delivery Optimization settings.
- DConfigure the subscription to use the HTTPS protocol.
How the community answered
(20 responses)- A5% (1)
- B75% (15)
- C15% (3)
- D5% (1)
Explanation
You have to prepare your Windows Server 2008/2008 R2 machines for collection of security events. To do this, simply add the Network Service account to the Built-in Event Log Readers forwarding-and-you.aspx The computer account does not need permissions to Event Log Readers. We do not need the HTTPS protocol. If anything, the reverse might be possible: if HTTPS were being used, if there were firewall concerns or an improper HTTPS setup, we might want to configure HTTP instead. Event Delivery Optimization specifies how to optimize collection of events for bandwidth / latency
Topics
Community Discussion
No community discussion yet for this question.