Securing Windows Server 2016 — Question 161

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.
You have an organizational unit (OU) named Administration that contains the computer account of Serve1.
You import the Active Directory module to Server1.
You create a Group Policy object (GPO) named GPO1. You link GPO1 to the Administration OU.
You need to log an event each time an Active Directory cmdlet is executed successfully from Server1.
What should you do?

Answer options

• A. From Advanced Audit Policy in GPO1, configure auditing for directory service changes.
• B. Run the(Get-Module ActiveDirectory).LogPipelineExecutionDetails = $falsecommand.
• C. Run the(Get-Module ActiveDirectory).LogPipelineExecutionDetails = $truecommand.
• D. From Advanced Audit Policy in GPO1, configure for other privilege use events.

Correct answer: C

Explanation

The correct answer is C because setting LogPipelineExecutionDetails to $true enables logging for the execution of Active Directory cmdlets. Option A is incorrect as it pertains to directory service changes, not cmdlet execution. Option B disables logging, which does not meet the requirement, and option D relates to privilege use events rather than cmdlet execution logging.