CompTIA
SK0-004 · Question #493
SK0-004 Question #493: Real Exam Question with Answer & Explanation
The correct answer is C: Enable audit object access and specify files and folders to monitor using Windows. See the full explanation below for the reasoning.
Question
A user reports that each day some files are deleted from the department share. The administrator needs to find who deleted these files. Which of the following actions should the administrator perform?
Options
- AEnable audit object access and specify files and folders to monitor using Task Manager.
- BEnable audit policy change and specify files and folders to monitor using Windows
- CEnable audit object access and specify files and folders to monitor using Windows
- DOpen Performance Monitor and monitor folder activity.
Community Discussion
No community discussion yet for this question.