What should you do?

You have 20 computers that run Windows 10.

You configure all the computers to forward all the events from all the logs to a computer named Computer1 that runs Windows 10.

When you sign in to Computer1, you cannot see any security events from other computers. You can see all the other forwarded events from the other computers.

You need to ensure that the security events are forwarded to Computer1.

What should you do?
A . On each computer, run wecutil ac /q.
B . On each computer, add the NETWORK SERVICE account to the Event Log Readers group.
C . On each computer, run winrm qc Cq.
D . On Computer1, add the account of Computer1 to the Event Log Readers group.

View Answer

Answer: D

Explanation:

References: https://docs.microsoft.com/en-us/windows/security/threat-protection/use-windows-event-forwarding-to-assistin-intrusion-detection