In the Advanced Audit Policy Configuration, which Account Logon subcategory is configured for Credential Validation with success and failure?

In the Advanced Audit Policy Configuration, which Account Logon subcategory is configured for Credential Validation with success and failure?

• A. Audit Credential Validation: Success and Failure
• B. Audit User Account Management: Success and Failure
• C. Audit Security Group Management: Success and Failure
• D. Audit Other Account Management Events: Success and Failure

Answer: (A)

Credential validation is the process of checking the credentials you present during logon. In Advanced Audit Policy Configuration, the Account Logon subcategory that handles this is Audit Credential Validation: Success and Failure. Enabling both success and failure logs captures every time credentials are correctly validated and every time validation fails, which helps you spot valid logons, failed attempts, and potential brute-force activity. This is distinct from auditing other account-related actions like User Account Management, Security Group Management, or Other Account Management Events, which track changes to accounts or groups rather than the logon credential checks.

Credential validation is the process of checking the credentials you present during logon. In Advanced Audit Policy Configuration, the Account Logon subcategory that handles this is Audit Credential Validation: Success and Failure. Enabling both success and failure logs captures every time credentials are correctly validated and every time validation fails, which helps you spot valid logons, failed attempts, and potential brute-force activity. This is distinct from auditing other account-related actions like User Account Management, Security Group Management, or Other Account Management Events, which track changes to accounts or groups rather than the logon credential checks.