CompTIA
SK0-003 · Question #237
A user reports that each day some files are deleted from the department share. The administrator needs to find who deleted these files. Which of the following actions should the administrator perform?
Sign in or unlock SK0-003 to reveal the answer and full explanation for question #237. The question stem and answer options stay visible for context.
Security and disaster recovery
Question
A user reports that each day some files are deleted from the department share. The administrator needs to find who deleted these files. Which of the following actions should the administrator perform?
Options
- AEnable audit object access and specify files and folders to monitor using Task Manager.
- BEnable audit policy change and specify files and folders to monitor using Windows Explorer.
- CEnable audit object access and specify files and folders to monitor using Windows Explorer.
- DOpen Performance Monitor and monitor folder activity.
Unlock SK0-003 to see the answer
You've previewed enough free SK0-003 questions. Unlock SK0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#file auditing#security auditing#shared folders#Windows security