SCP Exam SC0-411 Topic 2 Question 96 Discussion

Actual exam question for SCP's SC0-411 exam

Question #: 96
Topic #: 2

You are examining the Event IDs in your Windows 2000 network. There have been a large number of failed attempts at logon in the network. What is the Event ID for a failed attempt at Logon due to an account being disabled?

A107

B230

C374

D413

E531

Show Suggested Answer

Suggested Answer: E

by Garry at Sep 14, 2024, 12:09 AM

Limited Time Offer

25%

Off

Get Premium SC0-411 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gladys

4 months ago

E, all the way! 531 is the one I remember from my Windows admin days. Though I have to admit, I'm more of a Linux person these days.

upvoted 0 times

...

Alonzo

4 months ago

I'm picking B. 230 just because it sounds more like a 'disabled account' kind of number. Who knows, maybe I'll get lucky!

upvoted 0 times

Sabra

3 months ago

User3: I agree with User2, A) 107 seems like the right choice for a disabled account logon failure.

upvoted 0 times

...

Christa

3 months ago

User2: I'm going with A) 107, it sounds like it could be for a failed logon due to an account being disabled.

upvoted 0 times

...

Mary

3 months ago

User1: I think it's E) 531, that seems like it could be related to a disabled account.

upvoted 0 times

...

Kyoko

4 months ago

D, definitely D. 413 is the Event ID I've seen in our logs for that scenario. Gotta love those Windows Event IDs!

upvoted 0 times

...

Lavera

4 months ago

Hmm, I'm going with C. 374 sounds about right for a disabled account logon failure.

upvoted 0 times

Renay

3 months ago

I'm going to stick with C) 374, it seems like the most logical choice.

upvoted 0 times

...

Shawnna

3 months ago

You're correct, it is C) 374

upvoted 0 times

...

Lynelle

3 months ago

I believe it's actually C) 374

upvoted 0 times

...

Sarah

3 months ago

I think it's E) 531

upvoted 0 times

...

Gayla

3 months ago

E) 531

upvoted 0 times

...

Velda

3 months ago

D) 413

upvoted 0 times

...

Renea

4 months ago

Actually, I believe it's A) 107 for that type of logon failure.

upvoted 0 times

...

Raina

4 months ago

C) 374

upvoted 0 times

...

Tamala

4 months ago

B) 230

upvoted 0 times

...

Tawanna

4 months ago

No, I'm pretty sure it's D) 413 for a disabled account logon failure.

upvoted 0 times

...

Kallie

4 months ago

I think it's E) 531, not C) 374.

upvoted 0 times

...

Shawnna

4 months ago

A) 107

upvoted 0 times

...

Olga

5 months ago

I'm not sure, but I think it makes sense that E) 531 would be the correct Event ID for this scenario.

upvoted 0 times

...

Sheridan

5 months ago

I agree with Rikki, because Event ID 531 is specifically for a disabled account.

upvoted 0 times

...

Herschel

5 months ago

Ah, this one's tricky! I bet it's 531, that's the classic failed logon event due to a disabled account.

upvoted 0 times

Lonny

4 months ago

Let's go with 531, it seems to be the common choice for this type of event.

upvoted 0 times

...

Rashad

4 months ago

I remember seeing 531 in the logs for disabled accounts.

upvoted 0 times

...

Carlene

4 months ago

I'm not sure, but I think it might be 531 as well.

upvoted 0 times

...

Paris

4 months ago

I think it's 531 too, that's the one for disabled accounts.

upvoted 0 times

...

Buck

4 months ago

Yeah, I've seen that one before too. 531 is the correct Event ID for a failed logon due to a disabled account.

upvoted 0 times

...

Zona

4 months ago

I think you're right, it's definitely Event ID 531.

upvoted 0 times

...

Rikki

5 months ago

I think the Event ID for a failed attempt at Logon due to an account being disabled is E) 531.

upvoted 0 times

...