A company has Windows 8.1 client computers. One computer named Computer1 will be used to centralize event logs from other client computers. You configure a Group Policy Object (GPO) that pushes…

The correct answer is D. Create a source-computer-initiated subscription. Setting up a Source Initiated Subscription Source-initiated subscriptions allow you to define a subscription on an event collector computer without defining the event source computers, and then multiple remote event source computers can be set up (using a group policy setting)…

Configure and Manage Client Services

Question

A company has Windows 8.1 client computers. One computer named Computer1 will be used to centralize event logs from other client computers. You configure a Group Policy Object (GPO) that pushes event logs to Computer1. You need to configure Computer1 to receive the event logs. What should you do?

Options

ACreate a collector-initiated subscription.
BRun the New-EventLogcmdlet.
CRun the Get-EventLogcmdlet.
DCreate a source-computer-initiated subscription.

How the community answered

(29 responses)

A
14% (4)
B
7% (2)
C
3% (1)
D
76% (22)

Explanation

Setting up a Source Initiated Subscription Source-initiated subscriptions allow you to define a subscription on an event collector computer without defining the event source computers, and then multiple remote event source computers can be set up (using a group policy setting) to forward events to the event collector computer. This differs from a collector initiated subscription because in the collector initiated subscription model, the event collector must define all the event sources in the event subscription.

Topics

#event log forwarding#source-initiated subscription#Group Policy push#Windows Event Collector

Community Discussion

No community discussion yet for this question.

Full 70-692 Practice