Discussion

You are developing a Windows auditing plan and need to determine which log files to capture and review. You are considering log files that record access to sensitive resources. You know that auditing too many events for too many objects can cause computers to run more slowly and consume more disk space to store the audit log file entries.

Answer the following question(s):

If computer performance and disk space were not a concern, what is another reason for not tracking audit information for all events?