You have 15 computers that run Windows 7.
You need to implement a monitoring solution that meets the following requirements:
Sends an e-mail notification when an application error is logged in the event log.
Runs a script to restart the computer if an application error occurs between 17:00 and 07:00.
Minimizes the administrative effort required to monitor applications.
What should you do?

A.
On all the computers, configure a custom view. Configure a custom task for the application error events.

B.
On a computer, configure a custom view to displaythe application errors. Configure a custom task for the
application error events.

C.
On a central computer, configure an event subscription. On all of the computers, configure a custom task in
the Forwarded Events log.

D.
On all the computers, configure an event forwarding to a central computer. On the central computer,
configure a custom task in the Forwarded Events log.

Explanation:
10307 20233 30445
Answer D: Wording changed from event subscription to even forwarding.
Event Forwarding
Event forwarding enables you to transfer events that match specific criteria to an administrative (or collector)
computer. This enables you to manage events centrally. A single event log on the collector computer holds
important events from computers anywhere in your organization. You do not need to connect to the localevent
logs on individual computers.
Event Subscriptions
In a source-initiated subscription (sometimes termed a source computer-initiated subscription), the computer on
which an event is generated (the source computer) sends the event to the collector computer. You woulduse a
source-initiated subscription when you have a largenumber of source computers and you configure these
computers through Group Policy.