GSEC · Question #257
What Windows log should be checked to troubleshoot a Windows service that is falling to start?
The correct answer is B. System. Windows service startup failures are recorded in the System log, which captures events from the Service Control Manager and other OS components.
Question
What Windows log should be checked to troubleshoot a Windows service that is falling to start?
Options
- AApplication
- BSystem
- CSecurity
- DSetup
How the community answered
(26 responses)- A8% (2)
- B69% (18)
- C19% (5)
- D4% (1)
Why each option
Windows service startup failures are recorded in the System log, which captures events from the Service Control Manager and other OS components.
The Application log records events logged by user-mode applications and programs, not Windows OS services or the Service Control Manager.
The Windows System log records events generated by Windows system components, including the Service Control Manager (SCM). When a service fails to start, the SCM writes detailed error entries to the System log containing error codes and descriptions that identify the root cause of the failure.
The Security log records security-related events such as logon attempts, privilege use, and resource access auditing, not service startup failures.
The Setup log records events that occur during Windows installation and optional feature configuration, not runtime service failures.
Concept tested: Windows Event Log categories for service troubleshooting
Source: https://learn.microsoft.com/en-us/windows/win32/eventlog/event-logging
Topics
Community Discussion
No community discussion yet for this question.