Exam MD-100 All Questions

View all questions & answers for the MD-100 exam

Exam MD-100 topic 5 question 23 discussion

Actual exam question from Microsoft's MD-100

Question #: 23
Topic #: 5

You have a computer named LON-CL1.Adatum.com that runs Windows 10.
From Event Viewer, you create a custom view named View1 that has the following filter:
✑ User: User1
✑ Logged: Any time
✑ Event logs: System
✑ Computer: LON-CL1
✑ Event IDs: 10000 `" 11000
✑ Event level: Error, Verbose
You open Event Viewer and discover the event shown in the exhibit. (Click the Exhibit tab.)

The event does not appear in View1.
You need to ensure that the event appears in View1.
What should you do?

A. Add a Task Category setting to the filter.
B. Add the computer account to the Event Log Readers group.
C. Create an event subscription.
D. Modify the Computer setting in the filter.

Show Suggested Answer

Suggested Answer: D 🗳️

by KornienkoBoris at Oct. 18, 2019, 6:29 p.m.

Comments

Submit Cancel

amymay101

Highly Voted 5 years, 5 months ago

I think it is D - modify the computer to add the domain name

upvoted 8 times

...

OnePunchGus

Highly Voted 5 years ago

When answers are not clear in discussion, stick with the dump's answer.

upvoted 7 times

99redeyeflight

3 years, 2 months ago

following this advice is the easiest way to fail this exam

upvoted 2 times

...

williamlamata

Most Recent 2 years, 4 months ago

The correct answer is D. Modify the Computer setting in the filter. Since the event is logged on a computer named LON-SVR1 and not on LON-CL1, the event does not appear in View1. To ensure that the event appears in View1, we need to modify the Computer setting in

upvoted 1 times

...

devilcried

3 years, 3 months ago

Selected Answer: D

You have to use FQDN

upvoted 1 times

...

maggie_petrova

3 years, 6 months ago

Selected Answer: D

I have also tested it in my lab. When the computer is domain joined it needs FQDN.

upvoted 4 times

...

jaroti2116

3 years, 7 months ago

Need to add envent id 10010 in filter

upvoted 1 times

HvD

3 years, 5 months ago

I guess "10000 `" 11000" means 10000-11000, which includes 10010.

upvoted 2 times

...

MR_Eliot

3 years, 7 months ago

Just tested, Answer is D.

upvoted 1 times

...

Mizzjhaded

4 years, 11 months ago

The "Task category" is only available to filter a log once you've already selected something for "Event sources" above that in the "Filter Current Log" dialog. On the question, the filter setting doesn't indicate the "Event Source". So for me the answer for this is D.

upvoted 2 times

...

natttjam

5 years, 2 months ago

The answer is D. Tested on a domain joined computer. You have to use FQDN, which includes the domain name. If you look at the question it only indicates the computer name without the domain in the "computer" name. This returns 0 results in filtered view.

upvoted 4 times

...