Microsoft MCSA 70-290 Exam Prep

Answer - C - The type of object access that generated the event is not a valid criterion for a security log filter to identify specific file and folder access events.

Key Takeaway: Once audit entries have been configured on files or folders and auditing object access has been enabled through local or group policy, the system will begin to log access according to the audit entries. The Filter tab enables you to specify criteria including the event type, category, source, date range, user, computer, and success/failure audit.