You install the System Center Operations Manager 2007 Agent on all your companys domain controllers. You need to record all logon security events to the Audit Collection Services (ACS) database. You also need to enable the Operations Manager Audit Collection Service.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
Manually start the Operations Manager Audit Collection Service on each domain controller.
B.
Set the domain controller security policy to audit successes and failures on audit system events and on audit privilege use.
C.
Set the domain controller security policy to audit successes and failures on audit account logon events and on audit logon events.
D.
Set the Operations Manager Audit Collection Service to start automatically on each domain controller. Start the Operations Manager Audit Collection Service on each domain controller.
Explanation:
The ACS is a management server that has been configured to accept forwarded security log events from a specially configured agent.
The ACS is not installed by default. You have to install the collector service on a management server and enable the forwarder function on the agent. A database used specifically for audit collection is also required. Once configured, any event recorded in the security log on a monitored system will be saved in the ACS database.