You are an enterprise application developer. You create a Web-based application that manages financial transactions for an online investment company. The company requires to meet the following processes:
* Log all customer actions.
* Log all application execution failures.
The company security policy permits audit events to be logged. The security policy requires that there must be only one local administrator on the Web server. The policy also requires that all code must be run with the least possible privileges. The company uses Microsoft Windows Event Log as the repository for all event information. You need to recommend an appropriate solution to meet the companys requirements. You also need to ensure that you adhere to the company security policy.
What should you recommend?
A.
Create a custom event log for the application. Grant write security permissions on that log to the ASP.NET user account.
B.
Route log information to a serviced component that impersonates an administrator.
C.
Call a Web service that runs with default privileges and writes to Windows Event Log.
D.
Log events to text files and import the event logs into Windows Event Log.