Which statement about logon warning banners is correct?

• A. Sample banners are used to record activity by unauthorized users
• B. Warning banners indicate intruders consent to monitoring
• C. Equipment seized during evidence collection is recorded
• D. You should shut down the computer immediately during seizure

Answer: (B)

Logon warning banners are there to set expectations about access and monitoring. They inform anyone who uses the system that access is restricted and that activity may be monitored, often implying consent to monitoring by continuing to log on. So the statement that warning banners indicate intruders consent to monitoring aligns with how these banners are used in practice.

Banners themselves aren’t about recording activity (that’s handled by logs and other monitoring tools), they aren’t about seizure procedures, and they don’t instruct immediate shutdown during evidence collection.