Valid 70-417 Dumps shared by ExamDiscuss.com for Helping Passing 70-417 Exam! ExamDiscuss.com now offer the newest 70-417 exam dumps, the ExamDiscuss.com 70-417 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 70-417 dumps with Test Engine here:
Which of the following reasons justifies why you should audit failed events?
Correct Answer: B
Explanation/Reference: Explanation: http://technet.microsoft.com/en-us/library/cc778162%28v=ws.10%29.aspx Auditing Security Events Best practices If you decide to audit failure events in the policy change event category, you can see if unauthorized users or attackers are trying to change policy settings, including security policy settings. Although this can be helpful for intrusion detection, the increase in resources that is required and the possibility of a denial-of- service attack usually outweigh the benefits.