Securing Windows Server 2016 — Question 139

You enable and configure PowerShell Script Block Logging.
You need to view which script blocks were executed by using Windows PowerShell scripts.
What should you do?

Answer options

• A. Open the log files in %LocalAppData%\Microsoft\Windows\PowerShell
• B. View the Microsoft-Windows-PowerShell/Operational event log
• C. View the Windows PowerShell event log
• D. Open the log files in %SYSTEMROOT%/Logs

Correct answer: B

Explanation

The correct answer is B because the Microsoft-Windows-PowerShell/Operational event log specifically records events related to PowerShell script block execution. The other options do not contain the relevant logging information for script executions, as they refer to different log locations or types that do not capture script block logging details.