GSEC · Question #65
What is the name of the command-line tool for Windows that can be used to manage audit policies on remote systems?
The correct answer is D. AUDITPOL.EXE. AUDITPOL.EXE is the built-in Windows command-line tool for configuring and querying audit policies, including on remote systems via the /s switch.
Question
What is the name of the command-line tool for Windows that can be used to manage audit policies on remote systems?
Options
- ASECEDTT.EXE
- BPOLCLI.EXE
- CREMOTEAUDIT.EXE
- DAUDITPOL.EXE
How the community answered
(18 responses)- A6% (1)
- B6% (1)
- C11% (2)
- D78% (14)
Why each option
AUDITPOL.EXE is the built-in Windows command-line tool for configuring and querying audit policies, including on remote systems via the /s switch.
SECEDTT.EXE is not a real Windows system utility and does not exist in any standard Windows installation.
POLCLI.EXE is not a valid Windows command-line tool and does not exist as a native Windows utility.
REMOTEAUDIT.EXE is a fabricated tool name and is not part of the Windows operating system.
AUDITPOL.EXE is the official Windows utility for managing audit policies locally and remotely. It supports the /s <system> parameter to target remote machines and covers both per-user and system-wide audit policy categories, making it the correct tool for this task.
Concept tested: Windows AUDITPOL.EXE remote audit policy management
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/auditpol
Topics
Community Discussion
No community discussion yet for this question.