A Windows application writes errors to the Application log, but the log is set to overwrite events older than 7 days. The application generates a large volume of errors, and the log fills up quickly, causing older events to be overwritten before they can be reviewed. You need to preserve the events for compliance. What is the best solution?

Set the log to 'Do not overwrite events' without increasing the size

Increase the maximum log size and set the retention method to 'Archive the log when full, do not overwrite events'

Disable the application's error logging

Clear the log manually every day

A Windows server's System log shows a critical error Event ID 41 (Kernel-Power) at 3:00 AM, followed by a series of Event ID 6008 (unexpected shutdown) entries. The server is in a data center with redundant power supplies and a UPS. What is the most likely cause?

A user pressed the power button

The UPS failed and the server lost power

The server's power supply or motherboard is failing, causing an unexpected power loss

A scheduled task triggered a restart

What type of information is typically found in the Windows System log?

Events related to user authentication and access to files

Events related to software application errors

Events related to the operation of the operating system and its components

Events related to network packet captures

CiscoCertified Support Technician (CCST) Cybersecurity

Domain 3Objective 5

Interpret System Logs 100-160 Practice Questions (Page 6)

Part of the Endpoint Security Concepts domain, which makes up ~25% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

6concepts

Questions 26–30

26foundation · easy
In Windows Event Viewer, which log category contains records of events related to the operating system components, such as driver failures and system crashes?
Select an answer first
27expert · hard
A Windows application writes errors to the Application log, but the log is set to overwrite events older than 7 days. The application generates a large volume of errors, and the log fills up quickly, causing older events to be overwritten before they can be reviewed. You need to preserve the events for compliance. What is the best solution?
Select an answer first
28expert · hard
A Windows server's System log shows a critical error Event ID 41 (Kernel-Power) at 3:00 AM, followed by a series of Event ID 6008 (unexpected shutdown) entries. The server is in a data center with redundant power supplies and a UPS. What is the most likely cause?
Select an answer first
29foundation · easy
What type of information is typically found in the Windows System log?
Select an answer first
30foundation · easy
While reviewing system logs, an administrator notices multiple failed logon attempts for the same user account occurring every minute for the past hour. Which type of anomaly does this pattern suggest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-160

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-160” is a trademark of its owner, used for identification only.

Interpret System Logs 100-160 Practice Questions (Page 6)

Questions 26–30

In Windows Event Viewer, which log category contains records of events related to the operating system components, such as driver failures and system crashes?

A Windows server's System log shows a critical error Event ID 41 (Kernel-Power) at 3:00 AM, followed by a series of Event ID 6008 (unexpected shutdown) entries. The server is in a data center with redundant power supplies and a UPS. What is the most likely cause?

What type of information is typically found in the Windows System log?

While reviewing system logs, an administrator notices multiple failed logon attempts for the same user account occurring every minute for the past hour. Which type of anomaly does this pattern suggest?

Keep studying — Endpoint Security Concepts