HOTSPOT
You are troubleshooting communication issues on a computer that has Windows 8
Enterprise installed. The relevant portion of the computer configuration is displayed in the
exhibit. (Click the Exhibit button.)
You need to find the Windows Firewall service startup and shutdown events. In the Event
Viewer, which event log should you select? (To answer, select the appropriate log in the answer area.)
Answer: 
Is it not system?? The first image actually shows we are auditing “other system events”
The answer is System.
Security
It’s security. Do a search for event ID 5024 in the security log and you will find a Firewall Service start event.