Answer: B - He should use the WMI Event Viewer to view events generated by Windows Management. He also wants to view the event date and time, class, point of origin, and description.
Key Takeaway: By default, WMI events are not traced. To use Event Viewer to enable WMI event tracing and locate WMI events, open Event Viewer. On the View menu, click Show Analytic and Debug Logs. Locate the Trace channel log for WMI under Applications and Service Logs > Microsoft > Windows > WMI Activity. Right-click Trace log and select Log Properties. Click the Enable Logging check box to start the WMI event tracing. WMI events appear in the event window for WMI-Activity. Double-click an event in the list to see the detailed information. You can view an event in XML View or in Friendly View format.
