A user reports that each day some files are deleted from the department share. The administrator needs to find who deleted these files. Which of the following actions should the administrator perform?
A) Enable audit object access and specify files and folders to monitor using Task Manager.
B) Enable audit policy change and specify files and folders to monitor using Windows Explorer.
C) Enable audit object access and specify files and folders to monitor using Windows Explorer.
D) Open Performance Monitor and monitor folder activity.

Question

Quizplus · Accepted Answer

The administrator should enable audit object access and specify files and folders to monitor using Windows Explorer to track who is deleting files.

A User Reports That Each Day Some Files Are Deleted