Which System subcategory is configured to audit the IPsec Driver?

Which System subcategory is configured to audit the IPsec Driver?

• A. System: Audit System Integrity
• B. System: Audit Security State Change
• C. System: Audit Security System Extension
• D. System: Audit IPsec Driver

Answer: (D)

Auditing in Windows lets the system log specific security-related events, so you can track what’s happening at a detailed level. The IPsec driver is the component that enforces IPsec policies for secure communications, so auditing its activity records events related to loading, configuration, and any issues with that driver. The option that specifically configures auditing for the IPsec Driver targets exactly that driver’s events, making it the best choice. The other subcategories monitor different system areas—integrity, security state changes, and security system extensions—and don’t capture IPsec driver activity. Enabling this audit helps you monitor the health and security of IPsec operations and detect potential tampering or misconfigurations.

Auditing in Windows lets the system log specific security-related events, so you can track what’s happening at a detailed level. The IPsec driver is the component that enforces IPsec policies for secure communications, so auditing its activity records events related to loading, configuration, and any issues with that driver. The option that specifically configures auditing for the IPsec Driver targets exactly that driver’s events, making it the best choice. The other subcategories monitor different system areas—integrity, security state changes, and security system extensions—and don’t capture IPsec driver activity. Enabling this audit helps you monitor the health and security of IPsec operations and detect potential tampering or misconfigurations.