Question

You suspect that your web server has been the target of a denial-of-service attack. You would like to view information about the number of connections to the server over the past three days. Which log would you most likely examine

Answer 1

Performance log

Step-by-step explanation:

The Windows Performance Logs and Alerts, is a service that monitors and collects the performance data on resources, processes, threads, cache, memory, and processor, dependent on parameters which are preconfigured and scheduled, and logs the data or results in an alert

The service can be enabled from the file perfmon.exe

From the logs, troubleshooting the security of the system can be performed by monitoring file access, unusual or unauthorized activities, network connections, unusual system behavior, error messages and unusual network behavior