To export security event logs for external analysis, which feature should you use?

• A. Activity Log Export
• B. Restart Options
• C. Shadow Copies
• D. Alerts

Answer: (A)

Exporting security event logs for analysis requires a feature that pulls the log data out of the device and makes it available to external systems. Activity Log Export is designed for this purpose, allowing you to export the security event records to a file or forward them to another system (such as a SIEM) for offline review, auditing, or incident response. It typically supports selecting a time range and choosing an export format to facilitate integration with tools outside the endpoint environment.

The other options don’t fit this goal: Restart Options only changes reboot behavior, not log export. Shadow Copies create point-in-time file backups, not log exports. Alerts generate notifications about events, but they don’t provide a full export of logs for external analysis.