Exam AZ-801 topic 5 question 33 discussion

Actual exam question from Microsoft's AZ-801

Question #: 33
Topic #: 5

HOTSPOT
-

Your network contains an Active Directory domain. The domain contains a domain controller named DC1 and a server named Server1 that runs Windows Server.

You need to enable event log subscriptions to forward events from DC1 to Server1.

Which command should you run to enable the Windows Event Collector service, and on which servers should you run the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by ducklaorange at Feb. 22, 2025, 8:59 a.m.

Comments

Submit Cancel

Krayzr

2 months, 3 weeks ago

Given Correct Command: The Windows Event Collector service needs to be enabled to allow event forwarding. The correct command to configure and enable the Windows Event Collector service is wecutil qc. This command configures the service to accept events from remote computers. Servers: Event forwarding requires the Windows Event Collector service to be enabled on the server that will collect the events (in this case, Server1, the collector). The source server (DC1) needs to be configured to forward events, but the Windows Event Collector service itself runs on the collector server, not the source. Therefore, you run the command on Server1 only.

upvoted 2 times

...

Exam AZ-801 All Questions

View all questions & answers for the AZ-801 exam

Exam AZ-801 topic 5 question 33 discussion

Comments

Krayzr

SY0-701