Certified SOC Analyst (CSA) — Question 83

Which of the following Windows Event Id will help you monitors file sharing across the network?

Answer options

• A. 7045
• B. 4625
• C. 5140
• D. 4624

Correct answer: C

Explanation

The correct answer is C (5140), as this event ID specifically logs when a file share is accessed on the network. Option A (7045) relates to service installations, B (4625) reports failed logon attempts, and D (4624) indicates successful logons, none of which pertain to file sharing monitoring.