SA Revision Quizzes 4.1 - 4.3

Event Logs are

• records of events taking place after executing an Windows application

• records of events taking place before the execution of a system

• records of events taking place in the execution of a system

• records of events taking place after MBR boots

Event Logs is able to provide historical information that can help users to track down

• system problems

• GPT problems

• security problems

• application problems

To manage remote logs, the following must be enabled

• remote management

• outbound traffic for Log Management

• inbound exceptions for Remote Event Log Management

• regedit.exe and inbound traffic for Log Management

• inbound and outbound exceptions for remote server

The two general types of log files are

• Windows Log , Services Log

• Application Log , Services Log

• Application Log, Server Log

• Windows Log , Application and Services Log

• Local Log, Remote Log

The different types of Windows Log include

• Third-Party Application Logs

• Forwarded Event Logs

• MBR and GPT logs ( Startup logs )

• Remote Event Logs

• System Logs

Event Viewer

• cannot be used to provide access to recorded event information

• can be used to subscribe to event logs

• can run an scheduled task in response to an event

• only allows administrators to manage event subscription

• only works when connected to an domain network, and requires administrative privileges

The different types of events does not include

• Attention

• Remote

• Local

• Information

• Errors

Event subscriptions

• involves the use of a Local Computer, which is responsible for collecting events from Source Servers

• enables users to centralize collections of events from multiple computers

• allows source computers to forward events to collector computers

• involves the use of Local Computers and Collector Computers

• allows Collector Computers to subscribe to an database for event subcriptions

Software updates is able to

• improve performance

• improve stability

• improve usability

• decrease server downtime

Microsoft Updates

• does not include updates for third-party applications

• includes updates for device drivers

• includes updates for Microsoft applications

• requires the firewall that filters inbound packets to be off

• requires administrative privileges