Which Operating System logs contain information about operational actions performed by OS components?

• A. Event Logs
• B. Audit Logs
• C. Firewall Logs
• D. IDS Logs

Answer: (A)

Operational actions of the OS and its components are captured in the OS’s event logging system. Event logs record a broad range of system and application events, including services starting or stopping, driver loads, configurations changes, and routine informational messages, warnings, or errors. This creates a chronological record of what the OS and its components actually did, which is essential for troubleshooting and post-incident analysis.

Audit logs focus on security-relevant activities (who did what and when), firewall logs track network filtering decisions, and IDS logs document detected intrusions or suspicious traffic. Therefore, the event logs are the best source for information about operational actions performed by OS components.