ある組織のネットワーク スペシャリストである Tenda は、Windows イベント ビューアーを使用してログに記録されたデータを調べ、不正なアクティビティの試行または成功を特定していました。Tenda が分析したログには、Windows セキュリティに関連するイベント (具体的には、ログオン/ログオフ アクティビティ、リソース アクセス、および Windows システムの監査ポリシーに基づく情報) が含まれています。
上記のシナリオで Tenda によって分析されたイベント ログの種類を特定します。
正解:C
Security event log is the type of event log analyzed by Tenda in the above scenario. Windows Event Viewer is a tool that displays logged data about various events that occur on a Windows system or network. Windows Event Viewer categorizes event logs into different types based on their source and purpose. Security event log is the type of event log that records events related to Windows security; specifically, log-on/log-off activities, resource access, and also information based on Windows system's audit policies . Security event log can help identify attempted or successful unauthorized activities on a Windows system or network. Application event log is the type of event log that records events related to applications running on a Windows system, such as errors, warnings, or information messages. Setup event log is the type of event log that records events related to the installation or removal of software or hardware components on a Windows system. System event log is the type of event log that records events related to the operation of a Windows system or its components, such as drivers, services, processes, etc.