312-38 question 160 discussion

View all Certified Network Defender Exam here
back to eccouncil forum

Question 160

Albert works as a Windows system administrator at an MNC. He uses PowerShell logging to identify
any suspicious scripting activity across the network. He wants to record pipeline execution details as
PowerShell executes, including variable initialization and command invocations. Which PowerShell
logging component records pipeline execution details as PowerShell executes?

  • A. Module logging
  • B. Script block logging
  • C. Event logging
  • D. Transcript logging
Answer:

A

User Votes:
A 2 votes
50%
B 1 votes
50%
C
50%
D 1 votes
50%
Discussions
0 / 1000
khlifi.ibrahim
3 weeks, 5 days ago

Script Block Logging in PowerShell is the component that:

Records detailed information about code as it is executed, including:
Pipeline execution
Variable initialization
Command invocations
Captures entire blocks of code, even if they are obfuscated or dynamically generated at runtime.
Is especially useful for detecting suspicious or malicious activity in scripts.