HOTSPOT
Your network contains 25 Web servers that run Windows Server 2012 R2.
You need to configure auditing policies that meet the following requirements:
Generate an event each time a new process is created.
Generate an event each time a user attempts to access a file share.
Which two auditing policies should you configure?
To answer, select the appropriate two auditing policies in the answer area.
Another one:
http://www.aiotestking.com/microsoft/which-two-audit-policies-should-you-configure-in-gpo1-2/
Detailed Tracking: These settings control auditing of encryption events, Windows process creation and termination events, and remote procedure call (RPC) events. SO, we have the answer as “object access” and “global object access”.