MENU
Which Windows 7 operating system log stores events collected from remote computers?
Suggested Answer: C
Get Premium Digital Forensics in Cybersecurity (D829) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Comprehensive and Detailed Explanation From Exact Extract:
The ForwardedEvents log in Windows 7 is specifically designed to store events collected from remote computers via event forwarding. This log is part of the Windows Event Forwarding feature used in enterprise environments to centralize event monitoring.
The System and Application logs store local system and application events.
The Security log stores local security-related events.
ForwardedEvents collects and stores events forwarded from other machines.
Microsoft documentation and NIST SP 800-86 mention the use of ForwardedEvents for centralized event log collection in investigations.
12 comments · newest first
LI
Lina
1 month ago
I feel confused about this one. Is it really just for remote computers?
DO
Dominga
1 month ago
Agreed! ForwardedEvents is specifically for that purpose.
KE
Kenda
1 month ago
I think it's C) ForwardedEvents. It makes sense for remote logs.
MA
Mariann
2 months ago
Yeah, C is the right answer!
YO
Youlanda
2 months ago
Wait, are you sure about that?
CH
Christiane
2 months ago
Definitely C) ForwardedEvents, no doubt!
SH
Sheridan
2 months ago
I thought it was A) System.
CO
Cordelia
2 months ago
It's C) ForwardedEvents!
CA
Carey
2 months ago
I’m torn between C) ForwardedEvents and A) System. I remember both are important for monitoring, but I can't pinpoint which one is for remote events.
ER
Ernie
3 months ago
I practiced a similar question, and I think it was about how logs are categorized. I want to say C) ForwardedEvents is correct.
OL
Olive
3 months ago
I feel like we covered this in class, but I can't recall the exact log name. Was it related to security or system events?
TH
Thaddeus
3 months ago
I think the answer might be C) ForwardedEvents, but I'm not completely sure. I remember something about remote logs.