Certified SOC Analyst (CSA) — Question 76

What does the Security Log Event ID 4624 of Windows 10 indicate?

Answer options

• A. Service added to the endpoint
• B. A share was assessed
• C. An account was successfully logged on
• D. New process executed

Correct answer: C

Explanation

Event ID 4624 indicates that an account has successfully logged on to the system, which is crucial for tracking user access. The other options do not relate to login events; option A pertains to services, option B deals with file sharing, and option D is about process execution.