Mark works as a Systems Administrator for TechMart Incl. The company has Windows-based
network. Mark has been assigned a project to track who tries to log into the system and the time of
the day at which the attempts occur. He is also required to create a system to track when
confidential files are opened and who is trying to open it. Now, Mark logs when someone is not able
to make a successful attempt to log into the system as Administrator but he also wants to log when
the user is successful to log into the system as Administrator. Which of the following is the reason of
logging by Mark when a user is successfully logged into the system as well as when he is failed?

A.
To determine if and when someone is authenticating successfully with high privilege.

B.
To make sure that user is not using the Administrator account.

C.
To determine if and when someone is authenticating successfully with high privilege.

D.
To make sure that user is not facing any problem.

Explanation:
In the above scenario, Mark is required to determine if and when someone is able to be
authenticated successfully with high privilege as well as the hacker activity. If any user was failed for
a number of times and was then successful any attempt, it can be a hacker activity. That’s why Mark
logs when a user is successfully logged into the system as well as when he is failed.