cisco vce dumps

cisco vce dumps.352 Chapter 8 Windows-based AnalysisThe Windows Event Logging Service records events from multiple sources and stores them in a single collection called the Event Log. The Event Log typically maintains 3 types of event logs: the Application log, the System log, and the Security log file. Typically, the Windows event log can be found in the C:\Windowsystem3config directory. You can open the Windows Event Viewer to view these logs by typing Event Viewer in the Run window and pressing the Enter key. Figure 8.8 shows the logs as seen in the Event Viewer window. As you can see, the left panel of the window shows various logs such as Application, System, and Security, while the right panel shows actions.Figure 8-8 Example of the Windows Event ViewerThere are a number of panels in the Event Viewer window that can be used in a variety of different ways to view data. Although the SECFND exam does not require candidates to have much in-depth knowledge of Windows logs, readers should still have a basic awareness of the types of data that can be seen in log files. When looking at Windows event log records, the following five categories of events are typically found.Error: Indicates that a major problem has occurred, for example, loss of data or functionality.Warning: This type of event is not significant, but signals that a problem may occur in the future.Information: This type of event indicates that the application, driver, or service is running successfully.Success Audit: This type of event logs an audited, successful security access attempt.Failure Audit: These events log audited, unsuccessful security access attempts.Since logs take up storage space, administrators should regularly delete old logs or import them into the storage system. Some security tools (e.g., Security Information and Event Manager [SIEM]) can be used as a centralized tool to read logs from multiple devices. A challenge for any system that attempts to use logs is the format of the logs