Exam MD-100 topic 3 question 102 discussion

HOTSPOT -
You have a computer that runs Windows 10.
You need to configure the local computer policy to meet the following requirements:
✑ An event must be created in the Security log when changes are made to local users or groups.
✑ The local administrator and guest accounts must be renamed.
Which Security Settings should you modify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Suggested Answer:
Box 1: Audit Policy -
An event must be created in the Security log when changes are made to local users or groups.
The Audit Policy Provides information about basic audit policies that are available in Windows and links to information about each setting.
The basic audit policy settings under Security Settings\Local Policies\Audit Policy are:

Audit account logon events -

Audit account management -

Audit directory service access -

Audit logon events -

Audit object access -

Audit policy change -

Audit privilege use -

Audit process tracking -

Audit system events -

Box 2: Security options -
Rename the administrator and guest accounts.
1. Start the Active Directory Users and Computers snap-in.
2. In the console tree, right-click your domain or the organizational unit that contains the Group Policy that you want, and then click Properties.
3. Click the Group Policy tab, click the Group Policy object that you want, and then click Edit. For example, click the Rename Administrator and Guest accounts
Group Policy object, and then click Edit.
4. Expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options.
5. In the right pane, double-click Accounts: Rename administrator account.
6. Click to select the Define this policy setting check box, and then type the new name that you want to use for the administrator account.
7. Click OK.
8. Double-click Accounts: Rename guest account.
9. Click to select the Define this policy setting check box, and then type the new name that you want to use for the guest account.
10.Click OK, and then quit the Group Policy Object Editor snap-in.
11.Quit the Active Directory Users and Computers snap-in.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/audit-policy