What term describes turning off event auditing on the target system?

• A. Clearing Logs
• B. Disabling Auditing
• C. Manipulating Logs
• D. Auditpol

Answer: (B)

Disabling auditing is the act of turning off the recording of security events on a system. Auditing is what generates security-relevant logs, so when you disable it, the system stops producing those logs, which can hide activities from detection. Clearing logs would be removing existing records, not stopping future logging. Manipulating logs refers to altering logs to mislead, not the act of turning off logging. Auditpol is the command-line tool used to view or change audit policies, but the action itself is described as disabling auditing.