SCP Exam SC0-411 Topic 2 Question 96 Discussion

Actual exam question for SCP's SC0-411 exam

Question #: 96
Topic #: 2

You are examining the Event IDs in your Windows 2000 network. There have been a large number of failed attempts at logon in the network. What is the Event ID for a failed attempt at Logon due to an account being disabled?

A107

B230

C374

D413

E531

Show Suggested Answer

Suggested Answer: E

by Garry at Sep 14, 2024, 12:09 AM

Limited Time Offer

25%

Off

Get Premium SC0-411 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gladys

1 months ago

E, all the way! 531 is the one I remember from my Windows admin days. Though I have to admit, I'm more of a Linux person these days.

upvoted 0 times

...

Alonzo

1 months ago

I'm picking B. 230 just because it sounds more like a 'disabled account' kind of number. Who knows, maybe I'll get lucky!

upvoted 0 times

Sabra

6 days ago

User3: I agree with User2, A) 107 seems like the right choice for a disabled account logon failure.

upvoted 0 times

...

Christa

10 days ago

User2: I'm going with A) 107, it sounds like it could be for a failed logon due to an account being disabled.

upvoted 0 times

...

Mary

12 days ago

User1: I think it's E) 531, that seems like it could be related to a disabled account.

upvoted 0 times

...

Kyoko

2 months ago

D, definitely D. 413 is the Event ID I've seen in our logs for that scenario. Gotta love those Windows Event IDs!

upvoted 0 times

...

Lavera

2 months ago

Hmm, I'm going with C. 374 sounds about right for a disabled account logon failure.

upvoted 0 times

Renay

13 days ago

I'm going to stick with C) 374, it seems like the most logical choice.

upvoted 0 times

...

Shawnna

15 days ago

You're correct, it is C) 374

upvoted 0 times

...

Lynelle

16 days ago

I believe it's actually C) 374

upvoted 0 times

...

Sarah

17 days ago

I think it's E) 531

upvoted 0 times

...

Gayla

18 days ago

E) 531

upvoted 0 times

...

Velda

19 days ago

D) 413

upvoted 0 times

...

Renea

21 days ago

Actually, I believe it's A) 107 for that type of logon failure.

upvoted 0 times

...

Raina

21 days ago

C) 374

upvoted 0 times

...

Tamala

22 days ago

B) 230

upvoted 0 times

...

Tawanna

27 days ago

No, I'm pretty sure it's D) 413 for a disabled account logon failure.

upvoted 0 times

...

Kallie

1 months ago

I think it's E) 531, not C) 374.

upvoted 0 times

...

Shawnna

1 months ago

A) 107

upvoted 0 times

...

Olga

2 months ago

I'm not sure, but I think it makes sense that E) 531 would be the correct Event ID for this scenario.

upvoted 0 times

...

Sheridan

2 months ago

I agree with Rikki, because Event ID 531 is specifically for a disabled account.

upvoted 0 times

...

Herschel

2 months ago

Ah, this one's tricky! I bet it's 531, that's the classic failed logon event due to a disabled account.

upvoted 0 times

Lonny

22 days ago

Let's go with 531, it seems to be the common choice for this type of event.

upvoted 0 times

...

Rashad

23 days ago

I remember seeing 531 in the logs for disabled accounts.

upvoted 0 times

...

Carlene

26 days ago

I'm not sure, but I think it might be 531 as well.

upvoted 0 times

...

Paris

1 months ago

I think it's 531 too, that's the one for disabled accounts.

upvoted 0 times

...

Buck

1 months ago

Yeah, I've seen that one before too. 531 is the correct Event ID for a failed logon due to a disabled account.

upvoted 0 times

...

Zona

2 months ago

I think you're right, it's definitely Event ID 531.

upvoted 0 times

...

Rikki

2 months ago

I think the Event ID for a failed attempt at Logon due to an account being disabled is E) 531.

upvoted 0 times

...