Câu 66: GSEC: GIAC Security Essentials

You have reason to believe someone with a domain user account has been accessing and modifying sensitive spreadsheets on one of your application servers. You decide to enable auditing for the files to see who is accessing and changing them. You enable the Audit Object Access policy on the files via Group Policy. Two weeks later, when you check on the audit logs, you see they are empty. What is the most likely reason this has happened?

1. A. You cannot enable auditing on files, just folders
2. B. You did not enable auditing on the files — đáp án hiện tại
3. C. The person modifying the files turned off auditing
4. D. You did not save the change to the policy