Question

During a review of a Windows Domain Controller's Security log, an analyst finds Event ID 4740 for the user account 'jsmith' generated three times within a five-minute window, each referencing the same source workstation 'WKSTN-14'. What event does this log entry indicate?

Accepted Answer

A user account was locked out after exceeding the failed logon threshold

Answer

A new user account named 'jsmith' was successfully created

Answer

A user account was granted special privileges at logon

Answer

A user successfully logged on interactively to the workstation