Practice question 392 of 506 · medium
An administrator must preserve the System log for analysis. Which command fits?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- wevtutil epl System C:\Lab\System.evtx
epl exports the log. cl clears it; logman manages collectors rather than exporting this event log; Get-SmbSession reports SMB sessions.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.