You are working as a technician at Certkiller .com. A user reports that he recently received an
error message stating, ‘error log full.’ Which of the following should you use in order to clear the
log?

A.
Event Viewer

B.
System Restore

C.
Device Manager

D.
System Information

Explanation:
Event logs have been a feature of Windows NT since its original release in 1993. Applications and
operating system components can make use of this centralized log service to report events that
have taken place, such as a failure to start a component or complete an action. The system
defines three log sources, “System”, “Application”, and “Security”. The System and Application log
sources are intended for use by the Windows operating system and Windows applications
respectively; the Security log source, however, is only directly writable by the Local Security
Authority Subsystem Service (lsass.exe). Event Viewer is a component of Microsoft’s Windows NT
line of operating systems that lets administrators and users view the event logs on a local or
remote machine.