Which utility is cited as a method to retrieve Windows event records?

Which utility is cited as a method to retrieve Windows event records?

• A. Notepad
• B. psloglist.exe
• C. Ping
• D. Nslookup

Answer: (B)

Retrieving Windows event records is done with a utility that can read the Windows Event Log data stored by the system. psloglist.exe, part of the Sysinternals suite, is designed to list event log entries from local or remote machines, showing details like the event source, ID, time, and description. This specialized capability makes it the right choice for pulling Windows event records. Notepad is just a text editor and doesn’t access or parse event logs. Ping tests network reachability, and Nslookup queries DNS records. Neither of these utilities interacts with Windows event logs, so they can’t retrieve those records.

Retrieving Windows event records is done with a utility that can read the Windows Event Log data stored by the system. psloglist.exe, part of the Sysinternals suite, is designed to list event log entries from local or remote machines, showing details like the event source, ID, time, and description. This specialized capability makes it the right choice for pulling Windows event records.

Notepad is just a text editor and doesn’t access or parse event logs. Ping tests network reachability, and Nslookup queries DNS records. Neither of these utilities interacts with Windows event logs, so they can’t retrieve those records.