What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016.

You have an organizational unit (OU) named Administration that contains the computer account of Server1.

You import the Active Directory module to Server1.

You create a Group Policy object (GPO) named GPO1. You link GPO1 to the Administration OU. You need to log an event each time an Active Directory cmdlet is executed successfully from Server1.

What should you do?
A . From Advanced Audit Policy in GPO1, configure auditing for directory service changes.
B . Run the Add-NetEventProvider-Name “Microsoft-Active-Directory” CMatchAnyKeywordPowerShell command
C . From Advanced Audit Policy in GPO1, configure auditing for other privilege use events.
D . From Administrative Templates in GPO1, configure a Windows PowerShell policy.

View Answer

Answer: D

Explanation:

References:

https://www.petri.com/enable-powershell-logging