Computer Hacking Forensic Investigator (CHFI v10) — Question 221

Which of the following Windows event logs record events related to device drives and hardware changes?

Answer options

• A. Application log
• B. Security log
• C. Forwarded events log
• D. System log

Correct answer: D

Explanation

The System log is specifically designed to capture events related to hardware changes and device drivers, making it the correct choice. The Application log contains events related to application software, the Security log records security-related events, and the Forwarded events log is used for events forwarded from other systems, none of which focus on hardware changes.