Manage Windows Vista security

Posted on

These questions are based on 70-622 – PRO: Upgrading your MCDST Certification to MCITP Enterprise Support Microsoft Software Practice Self-Test.

 

Objective: Manage Windows Vista security
SubObjective: Configure and troubleshoot User Account Control

 

Multiple Answer, Multiple Choice

 

You are responsible for maintaining security of 20 Windows Vista computers in your company. You want to collect the copies of security events from all the 20 remote computers and store them locally on your computer. You need to specify which events should be collected from all the remote computers.

 

What should you do?

 

 

  1. Create a custom view
  2. Create a filter
  3. Create an event subscription
  4. Create a scheduled task

 

Answer:

 

 

  1. Create an event subscription

 

Tutorial:
You should create an event subscription. Event Viewer in Windows Vista enables you to collect copies of events from multiple remote computers and store them locally. You can create an event subscription to specify which events should be collected from the remote computers. You can configure the subscription to specify exactly which events will be collected and in which log they will be stored locally. You are required to configure both the forwarding and the collecting computers to use the event collecting feature in Windows Vista. The subscription functionality depends on the Windows Remote Management or WinRM service and the Windows Event Collector or Wecsvc service. Both of these services must be running on computers participating in the forwarding and collecting process.

 

You should not create a custom view. You can create a filter to display only the events you are interested in for a particular issue. However, creating a filter for multiple event types can be time-consuming. You can use custom views to save that work. Once you have created a filter that displays only a particular event type, you can save that filter to use later. This saved filter is referred to as a custom view. You can use a custom view only to view events. You cannot use custom views to collect the copies of security events from remote computers and store them locally.

 

You should not create a filter. You can create a filter to display only the events you are interested in for a particular issue. You cannot use filters to collect copies of security events from remote computers and store them locally.

 

You should not create a scheduled task. Task Scheduler is used to automate administrative and system tasks. In Windows Vista, the Task Scheduler includes a new feature that integrates Event Viewer with Task Scheduler. The integration of Event Viewer with Task Scheduler enables it to trigger predetermined actions when a specified event occurs. For example, you can create a scheduled task that sends you an e-mail notification whenever any unauthorized user attempts to log on to your computer.

 

Reference:
TechNet Home > TechNet Magazine > November 2006 > New Tools for Event Management in Windows Vista

 

Windows Vista Technical Library > Windows Vista: Management and Operations > Event Viewer Overview > Event Subscriptions

 

TechNet Home > Windows Vista Home > Technical Library > Selected Scenarios for Managing Desktops with Windows Vista

 

TechNet Home > Community > Events > TechNet Events Repository > ITPRODSK-07: Event Log, Event Viewer & Task Scheduler in Windows Vista

Like what you see? Share it.Share on Google+Share on LinkedInShare on FacebookShare on RedditTweet about this on TwitterEmail this to someone
cmadmin

ABOUT THE AUTHOR

Posted in Archive|

Comment: